hast-util-has-property

Dangerous workflowscaution

One of two workflows uses pull_request_target, which can increase CI risk when handling untrusted contributions. No untrusted checkout or script-injection patterns were detected, limiting the concern.

Release historycaution

The package has existed since 2016 with eight releases, but its latest release was about three years ago and it had no releases in the last 12 months. This suggests a stable or dormant project rather than active maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with the long release gap and lowering confidence in ongoing maintenance.

Repo issue activitycaution

There are no open issues or pull requests and no recent issue or pull-request activity. For a small stable utility this is not severe by itself, but it provides little evidence of active stewardship.

Repo toolingcaution

The repository uses TypeScript and npm build tooling, but no security scanning tools were detected. The missing scanning is a transparency gap, though the package is small and otherwise straightforward.