php-junior/laravel-xml

Release historycaution

The package has three releases, all within about two months, but no release in roughly 21 months. That long pause lowers confidence in ongoing maintenance for a dependency.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, consistent with about 21 months since the last push. This is a meaningful abandonment concern for a dependency.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. The missing scanning is a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy. For a small utility this is not severe, but it reduces clarity about vulnerability reporting and maintenance expectations.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers or audit findings, but both of its two action references are unpinned. That leaves avoidable build-provenance risk.