Package Health/apex-advisory/upkeep-agent

apex-advisory/upkeep-agent

This release is usable but carries meaningful adoption risk. It has a stable, non-deprecated version, a modest runtime dependency set, no install-time lifecycle scripts, and a complete 29-file implementation with a README and license file. However, the package is brand new, with all five releases published within roughly 35 minutes of one another, and the artifact contains no tests or changelog; there is also no linked source repository, limiting transparency and independent maintenance verification. The proprietary licensing further reduces portability for downstream users. Because repository activity, provenance, and security-maintenance evidence are unavailable, this should be treated as a cautious dependency rather than a mature, well-established one.

Latest v1.0.4

Packagist

50%

Total Score

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

License

The package declares a proprietary license and includes a LICENSE file, so it is not unlicensed, but proprietary terms can constrain downstream use and redistribution compared with a conventional open-source license.

Package file tree

The artifact contains a coherent 29-file implementation covering commands, collectors, transport, signing, and configuration, which supports basic package completeness. However, the tree provides no independent source-repository evidence for review or reproducibility.

Package scaffolding

A substantial README is present, but the artifact has no tests and no changelog. No repository test or release evidence is provided to compensate for those maintenance and verification gaps.

Release history

The package is effectively new, with an age of 0 days and five releases in the observed period; the median interval is about 35 minutes. This may reflect initial iteration rather than established release discipline, so maturity and stability remain unproven.