Парсер, валидатор и генератор УПД формате XML
43%
Total Score
unhealthy
Risky: no release since January 2022 and no repository commits since April 2022.
The package has only two releases, with the latest published in January 2022 and none in the past four years. This is strong evidence of abandonment for a library dependency.
The repository recorded zero commits and zero active maintainers in the past three months, consistent with the long release gap and indicating no current maintenance capacity.
The repository has no security policy. This is a transparency and maintenance gap, although it is less severe than the prolonged lack of releases and commits.
The latest release is v0.2 rather than a stable major version, which adds maturity risk on top of the package's prolonged inactivity.
Both workflows were analyzed successfully and have no untrusted checkouts or script injection, but a high-confidence audit found an unpinned container image. That weakens build reproducibility and supply-chain hygiene.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.2 | — | — |
spatie/array-to-xml Version ^2.16 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.