digitalkaoz/xml-filter

The codebase includes tests, documentation, a matching repository, and a clear MIT license. Its lack of a security policy and very small user base add little reassurance for a dependency this old.

Latest 1.0

Packagist

42%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had only one release, on October 4, 2016, with no releases in the last 12 months; nearly ten years without a new release indicates strong abandonment risk.

Repo commit activity

The repository had zero commits and zero active maintainers in the last three months, consistent with the nearly ten-year release gap and materially increasing abandonment risk.

Repo issue activity

There are no open issues or pull requests and no activity in the last month. While this avoids an unresolved backlog, it also offers no evidence of active project engagement.

Repo popularity

The repository has only 3 stars, 0 forks, and 1 watcher. Popularity is supporting evidence rather than a verdict, but these numbers provide little evidence of a broad support community.

Repo tooling

Composer and Box are used for build and packaging, but no security scanning tools are reported. This is a transparency and maintenance gap, though it is less severe than the inactivity.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Robert Schönthal

Direct Dependencies

Dependency	Last Release	Score
symfony/yaml Version ^2.8 \| ^3.0	—	—
pimple/pimple Version ^3.0	—	—
symfony/console Version ^2.8 \| ^3.0	—	—
webmozart/assert Version ^1.0	—	—
symfony/var-dumper Version ^2.8 \| ^3.0	—	—