hast-util-heading-rank

Release historycaution

The package has six releases since March 2020, but none in more than three years and zero releases in the last 12 months. That suggests a maintenance pause, though the small, focused package may not need frequent releases.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with the long release pause. This lowers confidence in ongoing maintenance capacity.

Repo toolingcaution

The project uses TypeScript and npm build tooling, which supports a repeatable build, but no security scanning tools were detected. For this small utility, that is a modest transparency gap rather than a severe concern.

Workflow auditcaution

All two workflows were analyzed with no audit findings, no untrusted checkout or script-injection sinks, and no top-level write permissions. However, all four analyzed action references are unpinned, leaving avoidable update and supply-chain exposure.