shanyuliang/array2xml

Release historydanger

The package has had only two releases, both in September 2019, with no release in nearly seven years. The stable version and release notes help users understand the current release but do not offset the long inactivity.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with no development since September 2019. This is the strongest evidence of abandonment risk.

Maintainerscaution

Only one registry maintainer is listed, and the repository is owned by an individual rather than an organization. A small maintainer base can be adequate for a tiny utility, but here it provides little resilience after years without activity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That is a meaningful transparency and maintenance gap for a package with no recent development.

Security policycaution

The repository has no security policy. This limits guidance for reporting vulnerabilities and is a modest transparency concern.