achttienvijftien/static-xml-sitemap

Licensecaution

The manifest labels the package proprietary, with no license file detected in the package or repository. It is therefore licensed, but its terms may restrict adoption and provide less clarity for open-source consumers.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. The recent release history partly offsets this, but the current development pause lowers confidence in ongoing maintenance.

Repo issue activitycaution

The repository has no open issues and two open pull requests, but no issues or pull requests were merged in the last month, providing limited evidence of active project handling.

Repo toolingcaution

Composer is used for builds, but no security scanning tooling was detected. This is a transparency and maintenance-hygiene gap rather than evidence that the release is unsafe.

Security policycaution

The repository has no security policy. That leaves vulnerability reporting and response expectations unclear for a package intended to run in WordPress installations.