i-complex/xsd-reader

The package has a clear MIT license, a substantial README, extensive tests, and a repository that matches its name. Its small runtime dependency set and organization backing help, but security documentation and scanning are absent.

Latest 0.1.0

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

There were no commits and no active maintainers in the last 3 months. Combined with the old last push, this is strong evidence that active development has stopped or greatly slowed.

Release history

This is the only recorded release, published about 2 years and 5 months ago, with no releases in the last 12 months. That provides little evidence of ongoing maintenance for a library dependency.

Repo tooling

The repository uses Composer build tooling, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than proof that the package is unsafe.

Repository archived

The linked repository is not archived, which preserves the possibility of future maintenance. However, its last push was about 2 years and 5 months ago, consistent with the stale release history.

Security policy

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This lowers transparency for a package intended for application integration.