Package Health

xrplwin/xumm-sdk-php

A clear README, MIT license, tests, and a matching organization-backed repository provide useful transparency. The lone release and inactive repository leave future fixes uncertain; pin workflow images before relying on automated builds.

Latest v1.1.1PackagistPackagist

58%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

83

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

80

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

67

Health Score Breakdown

Release historycaution

This package has only one release, published about 2 years and 8 months ago, with no releases in the last 12 months. That provides little evidence of ongoing maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months. Combined with the single-release history, this is meaningful evidence of stalled maintenance.

Repo popularitycaution

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these counts provide no community signal to offset the lack of recent activity.

Repo toolingcaution

Composer and Make are used for project tooling, but no security scanning tools were detected. The missing scanning is a modest transparency and maintenance gap.

Repository archivedcaution

The linked repository is not archived, but its last push was about 2 years and 8 months ago, so the inactive state is not fully reassuring.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Pauline Vos

Direct Dependencies

DependencyLast ReleaseScore
ratchet/pawl
Version ^0.4.1
—
—
symfony/yaml
Version ^6.0|^7.0
—
—
monolog/monolog
Version ^2.3|^3.0
—
—
vlucas/phpdotenv
Version ^5.4
—
—
guzzlehttp/guzzle
Version ^7.4
—
—

Weekly Downloads

Info

Last Published
2 years ago
Created
2 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform