hast-util-to-html

Build provenancecaution

No build attestation or trusted-publisher provenance is available, leaving publication origin less transparent.

Dependency profilecaution

The release declares 11 runtime dependencies, which is a meaningful dependency surface for a utility package and adds maintenance exposure, without evidence here of an extreme or unmanaged profile.

Release historycaution

The project has existed for over 10 years with 31 releases, but it has made no release in the last 12 months; that reduces confidence in ongoing maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, indicating a recent pause in development and adding abandonment risk.

Repo toolingcaution

The repository uses TypeScript and npm build tooling, but no security scanning tools were detected; this is a modest transparency and assurance gap.