Its dependency list is small, but only one maintainer is recorded and the source repository could not be found. The 0.1.0 version offers little maturity evidence for adoption.
8%
Total Score
50
17
Packagist marks the entire package as abandoned, with no replacement supplied. That is a direct warning against taking a new dependency on it.
This is the package's only release, published over 11 years ago, with no releases in the last 12 months; that indicates severe abandonment risk.
Only one registry maintainer is recorded; combined with the stale release history, this leaves little visible maintenance capacity.
Version 0.1.0 is not marked prerelease, but the very early version provides little maturity evidence and is consistent with the absence of subsequent development.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
jms/serializer Version xsd2php-dev as 0.18.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.