skraeda/xmlary

Release historycaution

The package has had no releases in the last 12 months, and its latest release was in January 2021, about 5 years and 9 months ago. Earlier releases were frequent, but the prolonged pause indicates substantial maintenance risk.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last 3 months, consistent with the release history and indicating that maintenance has effectively stopped.

Repo popularitycaution

The repository has zero stars and forks and only two watchers. Popularity is not decisive, but this provides little evidence of an active user or contributor community.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a maintained library this is a modest transparency and upkeep gap.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. The absence is a maintenance transparency concern, though not evidence of a vulnerability.