libxmljs

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months. Combined with no registry releases in the last year, this is the strongest abandonment concern.

Workflow auditdanger

All four workflows were analyzed, but all 27 action references are unpinned and high-confidence unpinned container images were found. The audit also identifies high-confidence ad hoc package installation and publishing without short-lived trusted credentials; low-confidence cache findings are only hygiene concerns.

Build provenancecaution

No build attestation or trusted publisher identity is present. This leaves the registry artifact's build origin less transparent.

Lifecycle scriptscaution

Install and preinstall scripts run during installation. For a native Node.js binding this can support setup or binary installation, but it adds build and installation complexity for dependents.

Release historycaution

The package has 56 releases over more than 15 years, but the latest release was October 18, 2023 and there were no releases in the last 12 months. That indicates a materially aging release line.