halilim/xml-iterator

Release historycaution

The package has only 3 releases over roughly 12 years, with a median interval of about 5.6 years. A release in the last 12 months shows the project is not abandoned, but the long-term cadence remains sparse.

Repo commit activitycaution

There were no commits and no active maintainers in the preceding 3 months. The repository was pushed alongside a recent release, which partially offsets but does not remove the concern about ongoing maintenance capacity.

Security policycaution

No security policy was found in the repository. This is a modest transparency gap for handling vulnerability reports, though it is not evidence of unsafe code.

Workflow auditcaution

The single workflow scopes permissions read-only and has no audited findings, but all 3 action references are unpinned. That leaves a supply-chain hygiene gap without evidence of an exploitable workflow path.