ass/xmlsecurity

Its stable API, tests, license, and matching source repository support adoption. However, the last release was over 11 years ago, repository commits have stopped, and no security policy or scanning is present.

Latest v1.1.1

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only three releases, with no release in the last 12 months and the latest published over 11 years ago. This is a substantial maintenance concern despite the repository remaining available.

Repo commit activity

There were no commits and no active maintainers in the three months measured. Combined with the old registry release, this indicates the project is effectively inactive.

Repo tooling

Composer is used for builds, but no security scanning tooling is present. The missing scanning is a modest transparency and maintenance gap rather than evidence of a failing build.

Security policy

The repository has no security policy, which is a meaningful gap for a library handling XML encryption and signatures because it gives consumers no documented vulnerability-reporting path.

Workflow audit

No GitHub Actions workflows were found, so there are no workflow hazards to report. This also means the audit provides no evidence of automated repository checks.