dennisvandalen/xfdf-php

The matching source tree, MIT licensing, lightweight dependencies, and repository tests support straightforward use. The absent security policy and low project activity make long-term support less certain.

Latest 0.0.2

Packagist

55%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases exist, both from January 2023, with no release in the last 12 months. The repository was pushed more recently, but registry release activity still suggests weak release maintenance.

Repo commit activity

There were no commits and no active maintainers in the last three months. The 2025 push provides limited compensation, but current maintenance capacity remains uncertain.

Security policy

The repository has no security policy. For a package intended to be integrated into applications, this is a transparency and support gap.

Version stability

Version 0.0.2 is not a stable major release, which indicates an early-stage API. This is consistent with the package's small size but adds adoption risk.

Workflow audit

All 9 action references are unpinned, and the audit found a high-confidence bot-conditions issue in the Dependabot auto-merge workflow. A pull_request_target trigger is not dangerous by itself, but the identified condition problem and weak pinning reduce workflow hygiene.