xml-naming

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving release origin less independently verifiable, although the package is a small source-distributed module.

Release historycaution

The package is young at 134 days with three releases and a median interval of about 28 days, showing some release activity but limited history for judging long-term maintenance.

Repo bus factorcaution

All four recent commits came from one contributor, creating concentrated maintenance risk; organization ownership provides some capacity to hand maintenance off.

Repo commit activitycaution

Four commits occurred in the last three months, indicating recent activity, but the volume is modest for a project this young.

Version stabilitycaution

Version 0.3.0 is not a stable major release, but it is not marked as a prerelease and recent releases have not used prerelease versions.