xml2js

Release historycaution

The package has existed since 2011 with 54 releases, but it has had no release in the last 12 months and the latest release was over three years ago, which raises maintenance concerns.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. Combined with the lack of recent releases, this is the strongest evidence that active maintenance has slowed.

Repo issue activitycaution

The repository has 206 open issues and 43 open pull requests, but no issues or pull requests were closed or merged in the last month, indicating unresolved maintenance backlog.

Repo toolingcaution

The repository uses npm scripts for builds, but no security scanning tools are present. The missing scanning is a transparency and process gap, not a direct health failure.

Security policycaution

No security policy is present in the repository, leaving vulnerability-reporting expectations unclear for a package that parses external XML input.