@prettier/plugin-xml

Lifecycle scriptscaution

A prepare install-time script adds some installation complexity and supply-chain exposure, although this is not severe on its own.

Release historycaution

The package has 36 releases over roughly seven years, but there have been no releases in the last 12 months and the latest release is over a year old, reducing confidence that this version is actively maintained.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, a meaningful maintenance concern that is partly offset by recent pull-request merges and the recent repository push.

Token permissionscaution

One workflow lacks top-level token permissions and another grants top-level write access, leaving workflow privileges less restrictive than ideal.