A reader and writer for the Atom format
58%
Total Score
75
100
79
90
The package has five releases since 2015, but none in the last 12 months and its latest release was published more than five years ago. This is a meaningful maintenance concern despite its earlier release cadence.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with an effectively inactive project. The repository is not archived, but that does not compensate for the lack of recent development.
The repository uses Composer for builds, but no security scanning tool was detected. The build tooling is appropriate; the absent scanner is a modest transparency gap rather than a severe dependency risk.
The linked repository is not archived, although its last push was more than four years ago. The unarchived status is positive, but the old push date reinforces the maintenance concern shown by the inactive commit signal.
No repository security policy was found. For a small library this is a transparency gap, though it is less significant than the clear evidence of inactivity and does not by itself make the package unfit.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
sabre/xml Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.