character-entities-legacy

Release historycaution

The package has nine releases over about 11 years, but none in the last five years. That is a meaningful maintenance concern, though the package appears stable and narrowly scoped.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Combined with the old latest registry release, this indicates limited current maintenance.

Repo toolingcaution

The repository uses TypeScript and npm build tooling, but no security scanning tools were detected. For this small package, that is a modest hygiene gap rather than a severe dependency risk.

Security policycaution

No repository security policy was found, reducing transparency for vulnerability reporting and maintenance expectations.

Workflow auditcaution

The workflow audit completed without findings or untrusted execution paths, but all three action references are unpinned. That leaves avoidable build reproducibility and action-update risk.