xmlworld/api-client
Documentation and tests are present, and the repository is active. The single-contributor base and missing security policy increase continuity risk; pin v1.0.2 and verify future releases.
62%
Total Score
67
100
88
83
Health Score Breakdown
The repository is owned by the XMLWorld user account rather than an organization, so the single-contributor activity is not visibly backed by an organization that could transfer maintenance.
The package has had only 3 releases, with none in the last 12 months, and its latest registry release was about three years ago. This is partly offset by recent repository commits, but the published release cadence remains a maintenance concern.
All 5 recent commits came from one contributor, leaving maintenance dependent on a single active person.
Composer build tooling is present, but no security-scanning tooling was detected. The missing scanner is a modest process gap rather than evidence of unsafe code.
The repository has no security policy, so there is no documented channel or process for reporting vulnerabilities.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 guzzlehttp/guzzle Version ^7.7 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.