A convertor between XML text and Javascript object / JSON text.
58%
Total Score
caution
Usable with caveats: no registry release since February 2019, despite a maintained-looking source repository.
The package has 49 releases since May 2016, but none in the last seven years; the long release gap materially raises abandonment and freshness concerns.
The repository recorded zero commits and zero active maintainers in the last three months, indicating that current maintenance activity has stalled.
Only one registry publishing account is listed, limiting publishing redundancy; the linked repository is also owned by a user rather than an organization, so no broader backing is shown.
There were no new or closed issues or pull requests in the last month, while 87 issues and 39 pull requests remain open; this suggests limited issue management.
The repository uses build tooling including Webpack, Babel, TypeScript, and npm scripts, but no security scanning tool was detected; the tooling supports reproducible development while security oversight is limited.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
sax Version ^1.2.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.