Usable with caveats for evaluation or learning, but not a production dependency. The source repository is active and well-supported, while the registry has had no release in over two years and the project lacks some security governance.
65%
Total Score
100
50
81
67
Eight runtime dependencies make this a reasonably integrated Spryker module, but the dependency surface adds compatibility and maintenance considerations.
The package has only four releases and no registry release in the last 12 months; its latest registry release was in May 2024, which raises freshness concerns despite recent repository activity.
The repository uses Composer build tooling, but no security scanning tools were detected, leaving a modest supply-chain hygiene gap.
No repository security policy was found, which makes vulnerability-reporting expectations less transparent.
The sole workflow lacks top-level token permissions, so its effective permissions are not explicitly minimized in the repository configuration.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
spryker/stock Version ^8.0.0 | — | — |
spryker/store Version ^1.0.0 | — | — |
spryker/kernel Version ^3.30.0 | — | — |
spryker/product Version ^6.0.0 | — | — |
spryker/transfer Version ^3.27.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.