dcarbone/xml-writer-plus
The project is small, with 13 stars and one registry maintainer, and its repository has no recent commits. Apache-2.0 licensing, a matching repository, release notes, and no install scripts provide useful transparency and limit adoption concerns.
62%
Total Score
75
100
81
83
Health Score Breakdown
One registry maintainer is consistent with a small, individually owned project, but it also indicates limited publishing redundancy.
The package has 10 releases over roughly 12 years, but none in the last 12 months and its latest release was in January 2021, indicating materially slowed maintenance.
There were no commits and no active maintainers in the last three months, which is a meaningful maintenance concern for a library dependency.
The repository has 13 stars and 2 forks, indicating a small user base; popularity is supporting context and does not by itself make the package unsuitable.
Composer is used for the build, but no security scanning tool is present; this is a modest transparency and maintenance gap rather than a severe risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Daniel Carbone |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 12 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.