hast-util-parse-selector

Release historycaution

The package has 14 releases since February 2016, but none in the last 12 months and the latest release was in August 2023. This long inactivity lowers confidence in continued maintenance.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the stale release history and raising abandonment concerns.

Repo toolingcaution

The project uses TypeScript and npm build tooling, supporting a structured build, but no security-scanning tools were detected. This is a modest transparency and maintenance gap rather than a severe risk.

Workflow auditcaution

Both workflows were analyzed successfully with no reported findings, and the pull_request_target trigger has no untrusted checkout or script-injection sink. However, all 4 action references are unpinned, which weakens build reproducibility.