dkulyk/xmltools

Release historydanger

The package has had only one release, published in September 2016, with no releases in the past 12 months. This is strong evidence of abandonment risk for a dependency taken today.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the past three months, and its last push was in September 2016. The non-archived status does not compensate for this decade-long inactivity.

Maintainerscaution

Registry publishing access is held by one individual, and project backing identifies a user-owned repository rather than an organization. This leaves a thin maintenance base with limited apparent continuity.

Package scaffoldingcaution

The artifact has no README, which makes a small library harder for consumers to understand and integrate. Missing tests and a changelog are normal for published artifacts and are not counted as gaps here.

Security policycaution

The linked repository has no security policy. This is a transparency gap, although the package's small size and long inactivity make it secondary to the maintenance risk.