neoncitylights/xml

Release historycaution

The package has only 3 releases, all clustered around February 2025, with 0 releases in the last 12 months despite being about 595 days old. This is a meaningful maintenance concern.

Repo commit activitycaution

There were 0 commits and 0 active maintainers in the last 3 months, consistent with the sparse release history and increasing abandonment concern.

Security policycaution

No security policy is present. This is a transparency gap, though the small library scope and available tests partly reduce its practical weight.

Workflow auditcaution

Both workflows were analyzed successfully with no detected injection or high-severity findings, but all 9 action references are unpinned and one workflow grants top-level write permissions, creating a workflow hygiene concern.