Package Health

heyday/xterraform

Maintenance has been dormant since January 2022, with no releases in the last 12 months and no recent issue or pull-request activity. The package is clearly identified, licensed, documented, and backed by an organization, but it lacks a security policy and active development evidence.

Latest 1.0.3PackagistPackagist

58%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

86

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historycaution

The latest release was in January 2022, with zero releases in the last 12 months; this is strong evidence of dormant maintenance for a package intended to provide infrastructure templates.

Repo issue activitycaution

There were no new issues or pull requests in the last month, and no open work is recorded; combined with the old latest release, this is consistent with a dormant project.

Repo toolingcaution

Composer is used as a build tool, but no security-scanning tooling is reported; this is a modest transparency gap rather than evidence of unsafe behavior.

Security policycaution

The linked repository has no security policy, reducing transparency for reporting infrastructure-related issues, though this is less serious than an archived or deprecated project.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

scaventum

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
5 years ago
Created
5 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform