darkfriend/php7-xml

The package has tests, clear usage documentation, a declared MIT license, and only one runtime dependency. However, its last release and repository push were over five years ago, with no recent commits and very little community activity.

Latest 2.0.0

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only four releases and none in the last 12 months; its latest release was over five years ago. This is a meaningful maintenance and abandonment concern.

Repo commit activity

There were no commits and no active maintainers in the last three months, consistent with the repository's last push being over five years ago. This substantially raises the risk that issues and compatibility problems will remain unresolved.

Repo popularity

The repository has only 2 stars, 0 forks, and 1 watcher. Popularity is not required for a healthy package, but these counts provide little evidence of a broader support community.

Repo tooling

Composer build tooling is present, but no security-scanning tools were detected. This is a modest transparency and maintenance gap, not a severe risk by itself.

Security policy

The repository has no security policy, leaving no documented process for reporting vulnerabilities. For a library that handles XML data, this is a real but limited transparency gap.