ml-express/xml

Registry deprecationdanger

Packagist marks the package abandoned at package scope and names clacy-builders/xml as its replacement, a direct warning against adopting it.

Release historydanger

There has been only one release, published more than 10 years ago, with no releases in the last 12 months; this indicates severe abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the package's long-term lack of releases.

Repo toolingcaution

Composer is used for builds, but no security-scanning tooling is present. This is a minor transparency gap, secondary to the much stronger abandonment signals.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented; the small project footprint does not compensate for this gap.