openlss/lib-array2xml

Licensecaution

The manifest declares Apache-2.0, but the detected artifact license is GPL-3.0, even though license files are present. This mismatch needs clarification because it can affect downstream projects.

Release historycaution

The package has had no registry release for about 7 years, despite 13 releases overall; this is a meaningful maintenance concern for a library dependency.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with a project that is no longer actively maintained.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, while 2 issues and 4 pull requests remain open; this suggests limited current project attention.

Repo toolingcaution

Composer is used for the build, but no security scanning tool was detected. The missing scanning is a modest transparency gap rather than evidence of an unsafe release.