rumenx/php-sitemap

This is a healthy, well-documented and actively maintained release with a stable major version, a matching source repository, tests, changelog, license, security policy, CI, and security scanning. Recent repository activity and two merged pull requests indicate ongoing maintenance, while the main concern is concentration of recent commits in one contributor and a relatively modest release cadence of five releases over 401 days. The available evidence supports depending on it, with normal single-maintainer continuity risk rather than a significant abandonment or transparency concern.

Latest v1.0.4

Packagist

84%

Total Score

Maintainer Stability

Dependencies

100

Maturity

100

Supply Chain

Health Score Breakdown

Maintainers

Only one account has registry publish access. This is a modest publishing continuity concern, though the linked repository identifies the same individual as its owner and active contributor, so it does not indicate an ownership mismatch.

Project backing

The repository is owned by a user rather than an organization, so there is no organizational handoff capacity to offset the concentrated maintainer base.

Repo bus factor

All four commits in the last three months came from one contributor, giving a 100% top-contributor share and creating a genuine single-person continuity risk.

Repo commit activity

Four commits were made in the last three months by one active maintainer, demonstrating recent work but also showing limited maintenance breadth.

Token permissions

Two workflows declare read-only permissions and none declare top-level write access; one style workflow lacks top-level permissions, which is a minor hardening gap but not evidence of excessive privilege.