hast-util-raw

Build provenancecaution

No build attestation or trusted-publisher provenance was reported. This limits publication transparency, but it is a secondary concern alongside the otherwise clear package and repository structure.

Release historycaution

The package has 29 releases over nearly 10 years, but no registry release in the last 12 months and its latest release was nearly two years ago. This indicates a meaningful cadence slowdown, though the long history supports maturity.

Repo commit activitycaution

No commits and no active maintainers were recorded in the last three months. This is a current maintenance warning, although the repository was pushed in April 2025 and the package has a long release history.

Repo issue activitycaution

There was no issue or pull-request activity in the last month, with one open issue and one open pull request. This is consistent with the broader recent slowdown but is not severe on its own.

Repo toolingcaution

The repository uses TypeScript and npm build tooling, but no security-scanning tools were detected. The missing scanning is a hygiene gap rather than evidence of abandonment.