Documentation, tests, and release notes make the codebase straightforward to evaluate. Use rumenx/php-feed instead, which the registry lists as the replacement for this deprecated package.
20%
Total Score
50
81
100
Packagist marks the entire package as abandoned and provides rumenx/php-feed as its replacement. Active repository work does not offset the fact that this package should no longer be selected for new dependencies.
The package has four releases over 416 days, with two releases in the last 12 months and a median interval of about 196 days. This shows some ongoing publishing but a relatively slow cadence.
One contributor made all three counted commits in the last three months, leaving no demonstrated second active maintainer to share continuity risk.
The repository recorded four commits in the last three months, but only one maintainer was active. Recent work exists, though the maintenance base is small.
The single workflow was fully analyzed, has read-only permissions, no untrusted checkout or script-injection findings, and no audit findings. All three action references are unpinned, which is a minor reproducibility concern.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.