xp-forge/measure
Clear documentation, tests, and release notes make integration easier. The stable release and organization-backed repository help, but limited security tooling and unpinned CI actions add ongoing maintenance risk.
55%
Total Score
75
88
50
Health Score Breakdown
The package has had no registry release in more than four years, despite nine releases overall; its long history provides some maturity, but the current maintenance gap is significant.
The repository recorded zero commits and zero active maintainers in the three months before collection, consistent with the extended release gap and increasing abandonment risk.
Composer is used for builds, but no security scanning tool was detected; this is a modest transparency and maintenance gap rather than evidence of an unsafe release.
No repository security policy was found, reducing transparency about how vulnerabilities are reported and handled.
The single workflow was fully analyzed with no dangerous triggers or audit findings, but all three action references are unpinned, leaving avoidable reproducibility and workflow supply-chain risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 xp-forge/sequence Version ^10.0 | ^9.0 | ^8.0 | ^7.0 | ^6.0 | ^5.0 | — | — |
xp-framework/core Version ^11.0 | ^10.0 | ^9.0 | ^8.0 | ^7.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.