php-soap/xml
The package has clear usage documentation, a matching MIT license, repository tests, and automated security tooling. Its workflows leave all six action references unpinned and no security policy is provided, which adds maintenance and supply-chain hygiene concerns.
70%
Total Score
67
100
100
75
Health Score Breakdown
All recent commits came from one contributor, leaving maintenance dependent on a single active individual; organization ownership provides some handoff capacity but no second recent contributor is shown.
Only 1 commit was recorded in the last 3 months, so recent maintenance activity is limited even though the repository was updated for this release.
No repository security policy is provided, reducing transparency about vulnerability reporting and response procedures for a library intended for integration.
All 3 workflows were analyzed successfully with no high-confidence audit findings or untrusted-code sinks, but all 6 action references are unpinned, leaving avoidable build reproducibility and action-substitution risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Toon Verwerft |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 veewee/xml Version ^4.8 | — | — |
php-standard-library/dict Version ^6.1 | — | — |
php-standard-library/foundation Version ^6.1 | — | — |
Weekly Downloads
Info
- Last Published
- 2 months ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.