hast-util-whitespace

Build provenancecaution

No build attestation or trusted-publisher provenance was provided, leaving publication origin less transparent. This is a supply-chain transparency gap rather than evidence that the release is unsafe.

Release historycaution

The package has eight releases over roughly 10 years, but no release in the last 12 months; the latest release was in July 2023. This indicates a mature but currently inactive release line.

Repo commit activitycaution

There were no commits or active maintainers during the last three months, consistent with the release history showing no recent releases. This materially raises abandonment risk, though the package is a small stable utility.

Repo issue activitycaution

There are no open issues or pull requests and no recent issue or pull-request activity. This is consistent with a quiet mature project, but it does not demonstrate current maintenance.

Repo toolingcaution

The project uses TypeScript and npm scripts, showing a defined build process, but no security scanning tooling was detected. For this small utility, that is a minor hygiene limitation.