Mac OS X Plist parser/builder for Node.js and browsers
82%
Total Score
healthy
Healthy, with strong maintenance and provenance outweighing pre-1.0 versioning and incomplete workflow coverage.
The package has 13 publish-access accounts and a clear expo.io domain, but several accounts use outside domains, including brentvatne, exponent, kudochien, alanhughes, ccheever, szdziedzic, wschurman, ide, bycedric, tsapeta, philpl, creating account-hygiene risk despite organizational backing.
This is a pre-1.0 release and 70% of recent releases were prereleases, so version compatibility may change more often than in a mature stable-major package.
All 136 action references are pinned and no untrusted checkout or script-injection sinks were found, but only 30 of 54 workflows were analyzed; high-confidence template-injection findings remain hygiene concerns.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
base64-js Version ^1.5.1 | — | — |
xmlbuilder Version ^15.1.1 | — | — |
@xmldom/xmldom Version ^0.8.8 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.