xp-forge/address
The package has clear documentation, tests, release notes, and organizational backing. Maintenance has gone quiet for about one year, while all three workflow actions are unpinned and no security policy is provided.
65%
Total Score
75
83
50
Health Score Breakdown
The package has 22 releases over more than 11 years, but none in the last 12 months; the latest release was about one year ago. This suggests maintenance has slowed.
There were no commits and no active maintainers in the last three months, consistent with the year-long release gap. This is a meaningful maintenance concern, though not evidence of abandonment by itself.
The repository has only 2 stars, 0 forks, and 1 watcher. Low popularity is supporting caution about the size of the external user base, but it does not outweigh the package's documentation and backing.
Composer build tooling is present, but no security-scanning tool was detected. The missing scanner is a modest transparency gap rather than a direct safety verdict.
The repository has no security policy, leaving vulnerability reporting and response expectations unclear. This lowers transparency for a package intended as a reusable library.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 xp-framework/core Version ^12.0 | ^11.0 | ^10.0 | — | — |
xp-framework/tokenize Version ^9.0 | — | — |
xp-framework/reflection Version ^3.0 | ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.