muhittingulap/xml-parse

The package has a clear MIT license, a matching repository, and release notes for this version. Its tiny codebase and minimal dependency surface reduce complexity, but there is no security policy and repository tooling is sparse.

Latest v1.1

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only two releases, both in June 2021, with no releases in the last five years. This is strong evidence of abandonment risk for a dependency.

Repo commit activity

The repository has had zero commits and zero active maintainers in the last three months, with the last push in June 2021. The long inactivity materially lowers confidence in ongoing maintenance.

Project backing

The registry and repository are owned by the same individual account. This establishes consistent ownership, but it does not provide the broader backing or redundancy of an organization.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than decisive, but these values provide no additional evidence of community adoption or review.

Repo tooling

Composer is used for the build, but no security scanning tools are present. The simple six-file package limits the significance of this gap, but it offers little automated security assurance.