The package is clearly documented, licensed, tested, and has a small dependency footprint. Its maintenance activity has gone quiet, while workflow references are not pinned and repository security practices are limited.
65%
Total Score
67
100
89
67
The package has only 5 releases since June 2015 and none in the last 12 months, despite its latest release being about 13 months ago. This indicates slow maintenance, though the long-lived release history provides some maturity evidence.
The repository recorded 0 commits and 0 active maintainers in the last 3 months. Combined with no releases in the last 12 months, this raises a meaningful maintenance concern.
There are 2 open issues, with no issues or pull requests opened or closed in the last month. This is consistent with limited current project activity.
Composer build tooling is present, but no security scanning tools are configured. The missing scanning is a modest transparency and hygiene gap rather than evidence of an unsafe release.
The repository has no security policy. For a small sitemap library this is a transparency gap, but it does not by itself indicate abandonment or make the release unfit.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.