character-entities

Build provenancecaution

No build attestation or trusted-publisher provenance is present, reducing publication transparency; this is a moderate gap rather than evidence that the release is unsafe.

Release historycaution

The latest release was published in June 2022, with no releases in the last 12 months; this is a meaningful maintenance concern, although the package has a long history and the current release is stable.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap and indicating inactive maintenance.

Security policycaution

The repository has no security policy or security-scanning tooling, which weakens disclosure and oversight practices even though this is a small, dependency-free package.

Workflow auditcaution

The workflow audit completed fully with no dangerous triggers or audit findings, but all three analyzed action references are unpinned, leaving avoidable update-integrity risk.