spryker/shipment-discount-connector
Clear documentation, tests, and release notes make integration easier. Recent repository activity and a broad contributor base offset the long gap since the last registry release.
82%
Total Score
100
86
83
Health Score Breakdown
The package has 16 releases since August 2017, but none in the last 12 months and the latest registry release was in November 2024. This is a meaningful release-cadence concern, partly offset by current repository activity.
The project uses Composer for builds, which fits the package ecosystem. No security scanning tools were detected, leaving a modest transparency and assurance gap.
The repository has no security policy. This does not indicate abandonment, but it provides less guidance for reporting and handling vulnerabilities.
The single workflow was fully analyzed with no audit findings, no untrusted checkout or script-injection paths, and no broad top-level write permissions. Two of four action references are unpinned, which is a minor reproducibility and update-supply-chain weakness.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 spryker/money Version ^2.0.0 | — | — |
spryker/kernel Version ^3.33.0 | — | — |
spryker/discount Version ^4.3.0 || ^5.0.0 || ^6.0.0 || ^7.0.0 || ^9.0.0 | — | — |
spryker/shipment Version ^7.0.0 || ^8.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.