html-encoding-sniffer

Repo commit activitycaution

No commits or active maintainers were recorded in the last three months. Recent merged pull requests and the current release partly compensate, but this still weakens evidence of ongoing hands-on maintenance.

Repo toolingcaution

No build tool or security scanning tool was detected. This is a modest transparency and hygiene gap, although the small package and repository tests provide some compensating evidence.

Workflow auditcaution

All four analyzed action references are unpinned, which weakens workflow reproducibility. The audit also reported a low-confidence cache-poisoning pattern in the publish workflow; low-confidence cache findings are hygiene concerns rather than severe evidence alone.