xmldoc

Build provenancecaution

No build attestation or trusted-publisher provenance was found, leaving publication origin less independently verifiable despite the otherwise established release history.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, a meaningful maintenance warning; the recent release and long project history partly offset it.

Repo toolingcaution

The project uses TypeScript and npm build tooling, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so there is no documented process for reporting or handling vulnerabilities.