Clear licensing, tests, documentation, and organization backing reduce adoption friction. The build workflow has basic hardening gaps, and no security policy or scanning is visible.
68%
Total Score
75
100
94
75
The repository recorded zero commits and zero active maintainers in the last three months. That weakens evidence of active maintenance despite the recent registry release.
Composer and Robo build tooling are present, but no security-scanning tooling was detected. The missing scanning is a modest transparency and hygiene gap.
The repository has no published security policy. This reduces transparency for reporting and handling security issues, though it does not by itself show abandonment.
The single workflow was fully analyzed with no detected injection or high-severity findings, but both action references are unpinned. The absence of a top-level permissions block is acceptable on its own, while unpinned actions leave a supply-chain hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
techdivision/import-product-ee Version ^27.3 | — | — |
techdivision/import-product-variant Version ^26.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.