angular-html-parser

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the past 3 months, which is a maintenance concern. However, the package released 16 times in the past year and the repository was pushed with this release, partly compensating for the short-window inactivity measure.

Repo toolingcaution

The repository uses established build tools including TypeScript, npm scripts, esbuild, Rollup, Babel, and Gulp. No security scanning tools were detected, leaving a modest tooling gap.

Workflow auditcaution

Both workflows use read-only permissions and the audit completed fully, with no untrusted checkouts or script injections. All 4 action references are unpinned, and the low-confidence cache-poisoning finding is a hygiene concern rather than evidence of a severe workflow risk.