marcelxyz/php-xml-digital-signature
It includes a clear README, MIT license, and repository tests. The single release and long-dormant maintenance make it a poor choice for a new XML-signing dependency.
43%
Total Score
25
79
50
Health Score Breakdown
The package has only one release, published about 9 years ago, with no releases in the last 12 months. This is strong evidence that the dependency is abandoned or unmaintained.
The repository has had no commits or active maintainers in the last 3 months, and its last push was about 8 years ago. The long silence reinforces the abandonment concern.
There has been no new or closed issue or pull request activity in the last month, while 5 issues remain open. This provides additional evidence of limited ongoing maintenance.
Composer build tooling is present, but no security scanning tools were detected. That is a modest maintenance and security-hygiene gap, especially for a signing library.
The repository has no security policy. For a library handling XML signatures and cryptographic operations, this weakens vulnerability-reporting transparency.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Marcel Tyszkiewicz |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 9 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.