zongphp/xml

The package is small, has one runtime dependency, and its repository matches the package. Its minimal documentation and lack of maintenance evidence make long-term support uncertain.

Latest 2.0

Packagist

41%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases were published, with the latest more than eight years ago and none in the past 12 months. This is strong evidence of abandonment risk for a dependency.

Repo commit activity

The repository recorded no commits and no active maintainers in the past three months; its last push was in January 2018. That leaves little evidence of ongoing maintenance.

Package scaffolding

The artifact has a README, but it contains only seven characters and provides almost no integration guidance. Missing tests and a changelog are normal for published artifacts and do not lower the score here.

Repo tooling

The repository uses Composer, which supports reproducible package management, but it has no security scanning tools. This is a modest transparency and maintenance gap, not a standalone adoption blocker.

Security policy

No security policy is present in the repository, leaving vulnerability-reporting expectations unclear. Combined with the long maintenance gap, this modestly increases support risk.