innmind/xml

Repo bus factorcaution

All 4 recent commits came from one contributor. Organization backing partly offsets this concentration, but no second active contributor is shown.

Repo popularitycaution

The repository has 0 stars, 1 fork, and 1 watcher. This is weak supporting evidence, though popularity alone does not outweigh the observed release and maintenance activity.

Repo toolingcaution

Composer build tooling is present, but no repository security-scanning tool was detected, leaving a modest security-process gap.

Security policycaution

The repository has no security policy. This limits disclosure guidance and transparency for security issues, but is not evidence of unsafe code by itself.

Workflow auditcaution

All three workflows use six unpinned actions, and high-confidence secrets-inherit findings appear in the CI and release workflows. No untrusted checkout or script-injection path was detected, and there are no top-level write permissions.