The package includes a README, tests, release notes, security tooling, and a small runtime dependency set. Its workflow audit is clean, but the project remains lightly established and maintenance evidence is limited.
68%
Total Score
75
100
89
100
This is a young package with one release in about six and a half months and no established release cadence, which limits maturity evidence.
No commits and no active maintainers were recorded in the last three months. The recent repository push is encouraging, but the measured activity still leaves maintenance continuity uncertain.
The repository has no stars, forks, or watchers. This is weak supporting evidence, but popularity alone does not determine the health of a small package.
The single workflow was fully analyzed with no audit findings, no untrusted checkout or script-injection paths, and job-level permissions. All four action references are unpinned, a minor reproducibility and supply-chain hygiene gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
byjg/anydataset-xml Version ^6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.