spryker/shipment-gui-extension
The repository remains active with five contributors and balanced commit ownership, and the organization backs the project. The package includes a README, changelog, release notes, and a license; its old registry release history, absent security policy, and partially unpinned workflow actions are minor concerns.
80%
Total Score
100
100
88
67
Health Score Breakdown
The package has only two releases, with the latest registry release on August 16, 2021 and none in the last 12 months. Recent repository commits provide some compensating maintenance evidence, but the registry release cadence remains a caution.
Composer build tooling is present, but no security-scanning tool was detected. This is a modest repository hygiene gap, not evidence of abandonment.
The repository has no security policy, leaving vulnerability-reporting expectations and response guidance unspecified. This reduces transparency for dependents but is not severe enough to make the release unfit.
The single workflow was fully analyzed with no injection findings, no untrusted checkout, and no top-level write permissions. Two of four action references are unpinned, a minor reproducibility gap rather than a severe workflow risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.