horde/xml_wbxml

Release historycaution

The six-release history ends in December 2023, with no releases in about 2 years and 9 months. That long pause raises maintenance and abandonment concerns despite the repository remaining available.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This indicates little recent development activity, although it is not archived.

Security policycaution

The repository has no security policy. This limits transparency about vulnerability reporting and response, though it does not by itself indicate that the package is unsafe.

Workflow auditcaution

All three workflows were analyzed without high-confidence findings or untrusted-checkout and script-injection issues, but 5 of 8 action references are unpinned. That is a meaningful reproducibility and update-integrity hygiene gap.