dom-serializer

Lifecycle scriptscaution

A prepare script runs during installation, which adds build-time execution to installation and warrants some care, though this is a common practice for source-and-build packages.

Repo bus factorcaution

All one recent commit came from a single contributor. Organization ownership provides some handoff capacity, but no second recent contributor is shown.

Repo commit activitycaution

Only one commit was recorded in the last three months, which is thin direct commit activity, although the release and pull-request activity show the project is not abandoned.

Workflow auditcaution

All four workflows were analyzed, but all 10 action references are unpinned. The high-confidence bot-conditions finding in the Dependabot automation is a real workflow concern; the low-confidence cache-poisoning finding is only a hygiene concern.