Package Health

xp-forge/handlebars-templates

This is a generally well-structured, actively released package with a stable major version, 34 releases over roughly 5.6 years, three releases in the last 12 months, matching repository evidence, tests, a changelog, and no install-time lifecycle scripts. However, the repository shows no commits or active maintainers in the last three months despite the latest release, has very low popularity, and lacks a security policy and explicit workflow token permissions. It is usable as a dependency, but the limited recent development activity and security-process transparency warrant caution and periodic review.

Latest v4.3.1PackagistPackagist

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

88

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

80

Health Score Breakdown

Dependency profilecaution

The package declares six runtime dependencies, including its framework and template-related components, which is reasonable for its stated role but creates several transitive maintenance points.

Repo commit activitycaution

There were 0 commits and 0 active maintainers in the last three months. Although the package has recent releases and the repository was pushed recently, the lack of observed recent development is a meaningful maintenance-risk signal.

Repo issue activitycaution

There are 2 open issues and 1 open pull request, but no issues or pull requests were opened or closed in the last month; this indicates limited recent public interaction.

Repo popularitycaution

The repository has only 1 star, 0 forks, and 1 watcher. Popularity is supporting evidence rather than a verdict, but these counts provide little external validation or visible community redundancy.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The build setup is appropriate, while the absent scanning coverage reduces supply-chain transparency.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
xp-forge/json
Version ^6.0 | ^5.0
—
—
xp-forge/yaml
Version ^9.0 | ^8.0 | ^7.0 | ^6.0
—
—
xp-forge/frontend
Version ^7.0 | ^6.0
—
—
xp-framework/core
Version ^12.0 | ^11.0 | ^10.0
—
—
xp-forge/handlebars
Version ^10.0 | ^9.3
—
—

Weekly Downloads

Info

Last Published
27 days ago
Created
5 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform