@azure/core-xml
Core library for interacting with XML payloads
87%
Total Score
healthy
Healthy release with strong maintenance and documentation, though its repository workflows have notable hygiene findings.
Health Score Breakdown
The repository name does not match the package and its README does not mention it, which would normally raise ownership uncertainty. The organization-backed Azure monorepo context compensates for the name mismatch, but the missing README mention remains a minor transparency gap.
The project uses TypeScript, Turbo, and npm scripts, showing established build tooling. No security-scanning tools were detected, which is a modest transparency and hygiene gap.
All 21 workflows were analyzed with no untrusted checkouts or script-injection findings, and 18 use read-only permissions. However, the audit reports high-confidence template-injection findings, one workflow with top-level write permissions, and nine unpinned actions; these are workflow hygiene concerns without a corroborating dangerous trigger and sink.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 tslib Version ^2.8.1 | — | — |
fast-xml-parser Version ^5.5.9 | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 6 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.