kiwilan/php-xml-reader

Clear documentation, licensing, and a small dependency surface support routine use. Workflow automation has a high-confidence condition flaw and all 12 action references are unpinned, so review the release process before adoption.

Latest 1.1.0

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

100

Health Score Breakdown

Release history

The package has had no registry release in nearly two years: the latest was 2024-10-03, despite 13 releases since June 2023. This materially raises maintenance and abandonment concerns.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last three months. Although it was pushed in June 2026, the measured recent development activity is absent.

Workflow audit

All 12 analyzed action references are unpinned, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. The pull_request_target trigger has no untrusted checkout or script-injection sink, limiting the severity to workflow hygiene risk.