byjg/xmlnuke

Release historydanger

Only three releases exist, with the latest published in July 2015 and none in the last 12 months. This long release gap is a significant abandonment concern, although the package has a stable release rather than a withdrawn or deprecated one.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the past three months. Its last push was in June 2022, so the project shows prolonged inactivity despite not being archived.

Dependency profilecaution

The package declares 17 runtime dependencies and no development dependencies, creating a relatively broad runtime maintenance surface for an older framework. The signal does not show that these dependencies are themselves unsafe or unmaintained.

Repo toolingcaution

Composer is used for builds, which is appropriate for this package, but no security-scanning tools are detected. The absence is a modest hygiene gap, not evidence that the release is unsafe.