Package Health

spryker/tax-product-storage

The package includes clear documentation and release notes for integration, while its workflow audit found no dangerous findings. The absent security policy and two unpinned actions are minor transparency and build-hygiene drawbacks.

Latest 1.9.0PackagistPackagist

86%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

94

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a modest repository-hygiene gap, not evidence of unsafe code by itself.

Security policycaution

The repository has no SECURITY.md or other detected security policy, leaving vulnerability-reporting expectations unclear.

Workflow auditcaution

All workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, two of four action references are unpinned, which is a minor build reproducibility and supply-chain hygiene concern.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
spryker/kernel
Version ^3.30.0
spryker/propel
Version ^3.47.0
spryker/product
Version ^5.5.0 || ^6.0.0
spryker/storage
Version ^3.4.0
spryker/transfer
Version ^3.27.0

Weekly Downloads

Info

Last Published
3 months ago
Created
7 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform