Xmloxide

#5879 · by jawiggins

infra serverless GPU

0.00/ 5.00

blockedBeta

Mar 4, 2026 at 4:55 AM6 signals analysedNo manual reviews · fully automated

Trust Signal Breakdown

unverified23 sub-signals across 6 dimensions

CVEs, dependency health, and supply chain integrity

0 of 3 sub-signals with data

Known CVEsno data—

Weight redistributed to sub-signals with data

Dependency Healthno data—

Weight redistributed to sub-signals with data

Supply Chainno data—

Weight redistributed to sub-signals with data

Uptime, latency, error rates, and incident history

0 of 4 sub-signals with data

Uptimeno data—

Weight redistributed to sub-signals with data

Response Latencyno data—

Weight redistributed to sub-signals with data

Error Rateno data—

Weight redistributed to sub-signals with data

Incident Historyno data—

Weight redistributed to sub-signals with data

Commit recency, release cadence, issue response, CI/CD

0 of 4 sub-signals with data

Commit Recencyno data—

Weight redistributed to sub-signals with data

Release Cadenceno data—

Weight redistributed to sub-signals with data

Issue Responseno data—

Weight redistributed to sub-signals with data

CI/CD Presenceno data—

Weight redistributed to sub-signals with data

Downloads, stars, dependents, and growth trajectory

0 of 4 sub-signals with data

Download Volumeno data—

Weight redistributed to sub-signals with data

GitHub Starsno data—

Weight redistributed to sub-signals with data

Dependent Packagesno data—

Weight redistributed to sub-signals with data

Growth Trendno data—

Weight redistributed to sub-signals with data

License, documentation, security policy, changelog

0 of 4 sub-signals with data

Open Sourceno data—

Weight redistributed to sub-signals with data

Documentationno data—

Weight redistributed to sub-signals with data

Security Policyno data—

Weight redistributed to sub-signals with data

Changelogno data—

Weight redistributed to sub-signals with data

Track record, org maturity, community standing

0 of 4 sub-signals with data

Track Recordno data—

Weight redistributed to sub-signals with data

Org Maturityno data—

Weight redistributed to sub-signals with data

Community Standingno data—

Weight redistributed to sub-signals with data

Cross-Platformno data—

Weight redistributed to sub-signals with data

Limited data available — 6 of 6 signals pending evaluation

About this score

Scored across 23 sub-signals in 6 dimensionsScoring engine v1 (beta) — actively being expandedPhase 1: Core sub-signal architecture (live)Phase 2: Permission scope & expanded collection (in progress)

Trust AssessmentAI Assessment

Xmloxide is a Rust-based XML parser by jawiggins with unknown licensing, positioned as a libxml2 replacement. All trust signals score zero, indicating absent or insufficient data across vulnerability tracking, maintenance activity, adoption metrics, and publisher verification. This service is blocked due to lack of verifiable trust indicators and missing basic documentation including a README file.

Generated by Fabric AI · Mar 4, 2026 at 4:55 AM

Incidents & Alertslast 90 days

Mar 3Xmloxide added to Trust Index0.00

Showing 1 of 1 events

Data Sources6 indexed

OSV.devCVE database · vulnerability scanning for npm & PyPI packages

GitHub APICommits, issues, releases, repo metadata, transparency checks

npm RegistryPackage metadata, weekly downloads, maintainers, dependencies

PyPIPackage metadata, weekly downloads, dependency tree

△

HTTP Health Checks15-min pings · uptime, latency, status monitoring

PyPI StatsDownload statistics and trends

Are you the publisher?

Claim this profile to unlock deeper evaluation, real-time monitoring,
and trust signals that help agents discover your service.

Share this Trust Score

Generate a scorecard image optimised for X, LinkedIn and other social platforms.

⬇ Download Score Card