hast-util-to-text
hast utility to get the plain-text value of a node according to the `innerText` algorithm
68%
Total Score
83
100
89
88
Health Score Breakdown
The package has 11 releases since May 2019, but none in the last two years and the latest release was over two years ago. This is a meaningful maintenance concern for a dependency, though the mature release history partly offsets it.
There were no commits and no active maintainers in the three months measured, consistent with the package having had no release for over two years. This lowers confidence in current maintenance capacity.
The repository uses TypeScript and npm build tooling, but no security scanning tools were detected. The missing scanning is a modest transparency and hygiene gap.
Both workflows were analyzed successfully with no audit findings, no untrusted checkout or script-injection sinks, and no top-level write permissions. However, all four analyzed action references are unpinned, which weakens build reproducibility.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 @types/hast Version ^3.0.0 | — | — |
@types/unist Version ^3.0.0 | — | — |
hast-util-is-element Version ^3.0.0 | — | — |
unist-util-find-after Version ^5.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 7 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.