fix: check xml namespace in each package

src/helpers/buildPackage.ts

@@ -1,6 +1,7 @@
 import { XMLBuilder } from 'fast-xml-parser';
 
 import { PackageXmlObject } from './types.js';
+import { sfXmlns } from './constants.js';
 
 const xmlConf = {
   format: true,
@@ -42,7 +43,7 @@ export function buildPackage(packageContents: PackageXmlObject[], apiVersions: s
   // Construct the XML data as a JSON-like object
   const packageXmlObject: PackageXmlObject = {
     Package: {
-      '@_xmlns': 'http://soap.sforce.com/2006/04/metadata',
+      '@_xmlns': sfXmlns,
       types: mergedPackage.Package.types.map((type) => ({
         members: type.members.sort((a, b) => a.localeCompare(b)),
         name: type.name,
@@ -58,8 +59,8 @@ export function buildPackage(packageContents: PackageXmlObject[], apiVersions: s
   // Ensure formatting for an empty package
   if (mergedPackage.Package.types.length === 0) {
     xmlContent = xmlContent.replace(
-      '<Package xmlns="http://soap.sforce.com/2006/04/metadata"></Package>',
-      '<Package xmlns="http://soap.sforce.com/2006/04/metadata">\n\n</Package>'
+      `<Package xmlns="${sfXmlns}"></Package>`,
+      `<Package xmlns="${sfXmlns}">\n\n</Package>`
     );
   }
 

src/helpers/constants.ts

@@ -0,0 +1 @@
+export const sfXmlns = 'http://soap.sforce.com/2006/04/metadata';

src/helpers/parsePackage.ts

@@ -2,6 +2,7 @@
 import { XMLParser } from 'fast-xml-parser';
 
 import { PackageXmlObject } from './types.js';
+import { sfXmlns } from './constants.js';
 
 const XML_PARSER_OPTION = {
   ignoreAttributes: false,
@@ -30,8 +31,8 @@ export function parsePackageXml(xmlContent: string): PackageXmlObject | null {
     if (!packageData.types) {
       return null;
     }
-    const allowedKeys = new Set(['types', 'version']);
-    const packageKeys = Object.keys(parsed.Package).filter((key) => key !== '@_xmlns');
+    const allowedKeys = new Set(['types', 'version', '@_xmlns']);
+    const packageKeys = Object.keys(parsed.Package);
     const hasUnexpectedKeys = packageKeys.some((key) => !allowedKeys.has(key));
     if (hasUnexpectedKeys) {
       return null;
@@ -74,6 +75,10 @@ export function parsePackageXml(xmlContent: string): PackageXmlObject | null {
       packageData.version = packageData.version[0] as string;
     }
 
+    if (packageData['@_xmlns'] !== sfXmlns) {
+      return null;
+    }
+
     // Validate the final structure
     if (isPackageXmlObject({ Package: packageData })) {
       return { Package: packageData as PackageXmlObject['Package'] };