josemmo/uxml

Maintainerscaution

Only one account has registry publish access, leaving limited publishing redundancy. The linked repository is user-owned rather than organization-backed, so no compensating organizational backing is shown.

Repo commit activitycaution

There were no commits and no active maintainers in the three months measured. Although the latest release was recent in the release history, this still indicates currently quiet development.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. That is a meaningful transparency and maintenance gap for a dependency project.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Version stabilitycaution

Version 0.2.0 is not a prerelease, but the package remains below 1.0, so compatibility expectations are less mature than for a stable-major release.