A robust HTML entities encoder/decoder with full Unicode support.
68%
Total Score
caution
Usable with caveats: no commits in three months and all four workflow actions are unpinned.
The package is mature at about 13 years old with 28 releases, but only one release in the last 12 months indicates a slow cadence. The current release keeps this as a moderate concern rather than an abandonment signal.
There were no commits and no active maintainers in the last three months. Recent repository pushes and a current release partly offset this, but the lack of observed development lowers maintenance confidence.
The repository uses npm build tooling, but no security scanning tools were detected. This is a modest transparency and hygiene gap, not evidence that the package is unfit.
No security policy was found in the repository, leaving vulnerability-reporting expectations unclear.
No type declarations are included. This is a consumer-ergonomics gap for JavaScript library users, but it does not indicate abandonment or a supply-chain concern.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.