netlogix/xml-processor

Release historycaution

The package has four releases over about three years, with only one release in the last 12 months and a median interval of about 18 months. The latest release is recent, but the long cadence suggests limited maintenance activity.

Repo bus factorcaution

One contributor made 100% of the two recent commits. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

Only two commits were recorded in the last three months, all from one active maintainer. The recent release is positive, but this remains a thin maintenance footprint.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all six action references are unpinned, creating a meaningful reproducibility and supply-chain hygiene gap.