jeckerson/array2xml

Release historycaution

This is the package's only release, published over six years ago, with no releases in the last 12 months. That strongly suggests abandonment risk, though the repository remains available and unarchived.

Repo commit activitycaution

The repository had no commits and no active maintainers in the last three months. Combined with the one-release history, this indicates the project is not being actively maintained.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, with three issues still open. This provides no evidence of active support or issue resolution.

Repo toolingcaution

Composer is used for the build, which supports reproducible package management, but no security scanning tools are configured. The missing scanning is a modest supply-chain hygiene gap.

Security policycaution

The repository has no security policy, so there is no documented process for reporting or handling vulnerabilities. This is a transparency gap, although the package is small and has no evidence of active security problems here.