zetacomponents/feed
Zeta Components Feed is a PHP library for parsing and generating RSS 1.0, RSS 2.0, and Atom feeds. It provides a clean API to read feed metadata and items, and to build valid feeds, with support for enclosures and common extensions.
Consider it when:
NOASSERTION license string. Treat this as a hard gate: an unasserted license means no permission is confirmed, and shipping it into a commercial product without clearance is an avoidable compliance risk.Look elsewhere when:
spatie/laravel-feed is the obvious pick and is actively maintained.laminas/laminas-feed or symfony/* components with current security triage.SimpleXMLElement is cheaper, auditable, and has zero supply-chain surface.Bottom line: the honest signal here is low stars + unknown repository + unresolved license. That doesn't mean it doesn't work — Zeta Components code is historically solid — but it means we become the maintainer. Adopt only behind an interface we control.
For executives: "This is a small utility that lets us publish and read RSS/Atom feeds — the plumbing behind syndicating our content to partners, or pulling in outside content for a dashboard. It's a commodity component, not a differentiator. My recommendation: it's a candidate for a narrow, low-stakes use, but it carries maintenance and license risk, so I'd rather we use a supported alternative or a small in-house helper unless there's a reason to prefer this one. Cost impact is trivial; the risk is ownership, not price."
For engineering: "It does feed generation and parsing and nothing else — no Laravel integration, no service provider, no active maintenance signal, license string is NOASSERTION so legal must sign off before we merge it. If we use it, wrap it behind our own FeedWriter/FeedReader interface and pin the version; the swap path to spatie/laravel-feed or laminas/laminas-feed should be an afternoon, not a project. It should never become a direct dependency sprinkled through the codebase."
Decision ask: Approve only as an isolated, wrapped dependency with license clearance and an explicit owner; otherwise route to the maintained alternative.
How can I help you explore Laravel packages today?