xp-forge/pivot
Tests, release notes, and a matching organization-owned repository provide useful maintenance evidence. Its long pause since March 2024 and unpinned workflow actions make future upkeep less certain.
66%
Total Score
75
100
88
75
Health Score Breakdown
The package has eight releases over roughly 11 years, but no releases in the last 12 months and its latest release was in March 2024. This indicates a meaningful maintenance slowdown for a library dependency.
There were no commits and no active maintainers in the last three months, consistent with the repository's last push in March 2024. The sustained inactivity raises future maintenance risk.
The repository uses Composer build tooling, which fits the package ecosystem, but no security scanning tools are present. The missing scanning is a minor hygiene gap rather than evidence of abandonment.
The only workflow was fully analyzed with no trigger or injection findings, but all three action references are unpinned. The missing top-level permissions block is acceptable on its own; unpinned actions remain a supply-chain hygiene concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 xp-forge/sequence Version ^10.0 | ^9.0 | ^8.0 | ^7.0 | ^6.0 | ^5.0 | — | — |
xp-framework/core Version ^12.0 | ^11.0 | ^10.0 | ^9.0 | ^8.0 | ^7.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.