parses XML BMFont files into a JavaScript object
67%
Total Score
50
100
83
83
One registry maintainer creates a thin publishing base and a higher bus-factor concern, although the linked repository identifies the same individual as its owner.
The repository is owned by an individual rather than an organization, so the single-maintainer concern is not offset by visible organizational backing.
The package has nine releases since 2015, but no release in roughly two years and seven months. This suggests slowing maintenance, though the mature age and stable release history partly compensate.
There were no commits or active maintainers in the three months measured. Combined with the long release gap, this raises maintenance and abandonment risk.
The repository has only three stars and seven forks, indicating limited adoption evidence, but popularity is supporting evidence rather than a health verdict.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
xml2js Version ^0.5.0 | — | — |
xml-parse-from-string Version ^1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.