hast utility to transform from a `parse5` AST
70%
Total Score
75
90
50
The package has 23 releases over roughly 10 years, but its latest release was about 19 months before collection and there were no releases in the prior 12 months. Its long history and moderate median release interval provide maturity, but the recent pause lowers confidence in active maintenance.
The repository recorded zero commits and zero active maintainers in the last 3 months. Although the package may be stable, this is direct evidence of currently inactive development and increases abandonment risk.
Both workflows were analyzed successfully and have no reported audit findings or untrusted checkouts. However, all four action references are unpinned, leaving avoidable build reproducibility and action-update risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
vfile Version ^6.0.0 | — | — |
devlop Version ^1.0.0 | — | — |
hastscript Version ^9.0.0 | — | — |
@types/hast Version ^3.0.0 | — | — |
@types/unist Version ^3.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.