mathielen/cxml
Unfit to use for a new dependency because this package is deprecated and replaced by friendsofcxml/cxml-php. The linked project is active and tested, but that does not offset the registry’s package-level abandonment status.
20%
Total Score
100
88
67
Health Score Breakdown
The registry marks the entire package as abandoned and identifies friendsofcxml/cxml-php as its replacement. Package-level deprecation is a severe adoption risk even though the replacement project is active.
No repository security policy was found, leaving vulnerability-reporting expectations undocumented. This is a transparency gap, but it is secondary to the package-level deprecation.
The sole workflow has no top-level token permissions declaration. This weakens workflow-hardening hygiene, though no write permissions or dangerous workflow patterns were observed.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Markus Thielen |
| Giovanni Piemontese |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ^1.0 || ^2.0 || ^3.0 | — | — |
jms/serializer Version ^3.30.0 | — | — |
beberlei/assert Version ^2.0 || ^3.0 | — | — |
psr/event-dispatcher Version ^1.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 days ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.