Parse the package.xml safely