Package Health/diablomedia/zendframework1-validate-sitemap

diablomedia/zendframework1-validate-sitemap

Clear licensing, tests, and release notes make the package easy to evaluate and maintain. Its small user base and inactive recent development leave less evidence of ongoing support.

Latest 1.0.9

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has existed for about 8 years with 10 releases and one release in the last 12 months. The roughly 311-day median interval shows a slow cadence, but the recent release provides evidence of continued publishing.

Repo commit activity

There were no commits and no active maintainers in the last three months, which is a real support concern. The recent release and repository push partly compensate but do not demonstrate sustained development.

Repo issue activity

There are no open issues and five open pull requests, with no pull requests merged in the last month. The lack of merged work reinforces the weak recent maintenance signal.

Security policy

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented for users of this dependency.

Workflow audit

All five analyzed action references are unpinned, and one workflow grants top-level write access. The audit also found a high-confidence bot-conditions issue in the Dependabot auto-merge workflow; these are workflow hygiene and supply-chain maintenance concerns, not evidence that the package itself is unsafe.