jtrumbull/xml-parser

The package is small and easy to inspect, with tests, a README, an MIT license, and no install hooks. Future fixes may be slow because releases stopped in 2016 and recent repository activity is absent.

Latest v1.0.2

Packagist

55%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only three releases were published, with the latest in February 2016 and none in the past 12 months. That long gap raises abandonment and future-fix concerns, although the package may be stable for its narrow purpose.

Repo commit activity

There were zero commits and zero active maintainers in the past three months, while the last push was in June 2022. This is concrete evidence that fixes and support may be unavailable.

Repo issue activity

There were no new or closed issues or pull requests in the past month, with five open issues and one open pull request. The unresolved queue reinforces the maintenance concern.

Repo tooling

Composer is used for builds, but no security-scanning tools are present. For this small package that is a modest transparency gap rather than a severe adoption blocker.

Security policy

The repository has no security policy, so the process for reporting vulnerabilities is unclear. This is a maintenance and transparency gap, not evidence of maliciousness.