laminas/laminas-xml

Organization backing, matching source, tests, licensing, and release notes provide solid transparency. Stable versioning and no deprecation are reassuring, while maintenance activity and workflow pinning remain weaker.

Latest 1.8.0

Packagist

69%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Health Score Breakdown

Release history

The package has been published since 2020 with 13 releases, but only one release appeared in the last 12 months and the median interval is about 188 days. This suggests a slower maintenance cadence, though not abandonment by itself.

Repo commit activity

There were zero commits and zero active maintainers in the last three months. The recent 1.8.0 release provides some compensating evidence, but the current lack of activity lowers confidence in ongoing maintenance.

Repo issue activity

No issues or pull requests were opened or merged in the last month, with one issue and one pull request currently open. This is consistent with a small, quiet project but provides little evidence of active support.

Repo tooling

Composer is used for builds, but no security-scanning tool was detected. This is a transparency and hygiene gap, not a severe risk, because other repository and workflow evidence is available.

Workflow audit

All three workflows were analyzed successfully with no detected findings or untrusted triggers, and no workflow has top-level write permissions. However, all 9 action references are unpinned, leaving automation exposed to upstream reference changes.