mppx
86%
Total Score
healthy
Active, well-supported project with strong release transparency, though rapid version churn and workflow hygiene merit attention.
Health Score Breakdown
The package has 254 releases in 244 days, including 254 releases in the last 12 months and a median interval of about 6.7 hours; this shows active delivery but unusually rapid churn.
Version 0.13.5 is not yet on a stable major version, and 75% of recent releases are prereleases, so API stability is less established despite the current release not itself being prerelease.
All 13 workflows were analyzed successfully; two workflows have top-level write permissions, two action references are unpinned, and a high-confidence template-injection finding plus informational trusted-publishing finding indicate workflow hygiene concerns. The template finding is in a different workflow from the repository's workflow_run trigger, so it is not treated as a severe supply-chain finding.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
CVE-2026-63628 mppx is vulnerable to Improper Input Validation in versions 0.0.0 - 0.8.2. | 0.0.0 - 0.8.2 | Low |
CVE-2026-63627 mppx is vulnerable to Improper Input Validation in versions 0.0.0 - 0.8.1. | 0.0.0 - 0.8.1 | Medium |
AIKIDO-2026-967133 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. mppx is vulnerable to Improper Neutralization of CRLF Sequences (CRLF Injection) in versions 0.1.0 - 0.6.9. | 0.1.0 - 0.6.9 | Medium |
AIKIDO-2026-369362 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. mppx is vulnerable to Improper Authorization in versions 0.1.0 - 0.6.8. | 0.1.0 - 0.6.8 | Medium |
AIKIDO-2026-484607 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. mppx is vulnerable to Authentication Bypass in versions 0.5.5 - 0.6.11. | 0.5.5 - 0.6.11 | Medium |
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 ox Version 0.14.45 | — | — |
zod Version ^4.6.5 | — | — |
@stripe/stripe-js Version 9.17.0 | — | — |
eventsource-parser Version 4.1.1 | — | — |
structured-headers Version 2.1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 19 hours ago
- Created
- 8 months ago
- Unpacked Size
- 4.3 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.