xima-media/xm_tools

The package includes tests, a changelog, a README, and clear licensing, with organization backing. Maintenance has effectively stopped since June 2024, and the repository has no security policy or scanning; pinning this version is preferable to expecting updates.

Latest v12.0.0

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Lifecycle scripts

The package runs a post-autoload-dump lifecycle script during Composer operations. This adds install-time behavior and some supply-chain exposure, though the signal does not show that the script is harmful.

Release history

The package has 82 releases since July 2019, but none in the last 12 months and the latest release was in June 2024. This long release gap is a meaningful maintenance concern.

Repo commit activity

There were zero commits and zero active maintainers in the last three months. Combined with the release gap, this indicates that maintenance capacity is currently dormant.

Repo issue activity

There were no new or closed issues or pull requests in the last month, with no open issues or pull requests. This is consistent with a quiet project but does not independently prove abandonment.

Repo tooling

Composer is used for builds, but no security scanning tools were detected. The missing security automation is a transparency and maintenance gap for a PHP extension.