spryker/zed-ui

spryker/zed-ui 4.3.0 appears to be a healthy, actively maintained dependency. It has a six-year release history with 82 releases, five releases in the last 12 months, a stable non-prerelease version, current repository activity, and six active contributors with no concentration risk. The package and repository include substantial documentation, tests, changelog, licensing, and build scaffolding, while the repository is not archived and matches the package. The main reservations are the absence of a security policy and security scanning tools, plus a CI workflow without explicitly declared top-level token permissions; these are transparency and CI-hygiene gaps rather than evidence of abandonment. Overall, the package is suitable to depend on, subject to normal review of its proprietary licensing and dependency chain.

Latest 4.3.0Packagist

Health Score Breakdown

Repo toolingcaution

Composer build tooling is present, indicating a defined build process. No security scanning tools were detected, leaving a security-process gap that lowers transparency.

Security policycaution

The repository has no SECURITY.md or equivalent security policy. This is a genuine disclosure and vulnerability-reporting gap, although it does not by itself indicate abandonment.

Token permissionscaution

The only workflow lacks top-level token permissions, so the repository does not explicitly document a least-privilege default for GitHub Actions. No workflow requests top-level write permissions, which partially limits the concern.

View all 19 health checks

Vulnerabilities

We didn't find any vulnerabilities for this package.

Direct Dependencies

Dependency	Last Release	Score
spryker/twig Version ^3.30.0	—	—
spryker/kernel Version ^3.83.0	—	—
spryker/symfony Version ^3.0.0	—	—
spryker/transfer Version ^3.27.0	—	—
spryker/translator Version ^1.1.0	—	—

View All 8 Dependencies