xml-parse-from-string

Release historydanger

Only two releases were published, with no releases in over nine years and a long interval between them. This strongly lowers confidence in ongoing maintenance, although the stable 1.0.1 version is not inherently problematic.

Repo commit activitycaution

The repository has had zero commits and zero active maintainers in the last three months, consistent with a project that has been inactive since its 2017 release.

Repo toolingcaution

No build tooling or security scanning tools are present. For this small, dependency-free package the impact is limited, but it provides little evidence of automated quality or security checks.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. This is a meaningful transparency gap, though the package has no runtime dependencies.