queryr/xml-dump-reader

Release historydanger

The latest of only two releases was published in November 2015, with no releases in nearly 11 years. This is strong evidence of abandonment for a dependency that may need compatibility updates.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last three months, while its last push was in August 2018. The repository is not archived, but observed activity remains stale.

Repo popularitycaution

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than decisive, but it provides little indication of an active user or contributor community.

Security policycaution

The linked repository has no security policy. This weakens vulnerability-reporting transparency, although it is less significant than the package's long maintenance gap.