xmlbuilder2

Build provenancecaution

No build attestation or trusted-publisher provenance was present, so consumers have less verifiable evidence connecting the published artifact to its source build.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. This is a meaningful maintenance concern, partly offset by the recent release history and May 2026 push.

Repo issue activitycaution

There are 18 open issues and 12 open pull requests, but no issues or pull requests were opened or closed in the last month, indicating limited current repository responsiveness.

Repo toolingcaution

The project uses TypeScript, webpack, npm scripts, and Babel, but no security scanning tools were detected, leaving a security-hygiene gap.

Security policycaution

No repository security policy was found, reducing transparency about how vulnerabilities should be reported and handled.