html-entities

Build provenancecaution

The release has no build provenance attestation or trusted-publisher evidence. This weakens publication transparency but does not by itself indicate that the package is unsafe.

Project backingcaution

The repository is owned by an individual rather than an organization, so there is no organizational backing shown to offset the recent quiet maintenance.

Release historycaution

The package has 48 releases and a long history, but it has had no release in the last 12 months despite a latest release in March 2025. This indicates slowing maintenance rather than abandonment on its own.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last 3 months. Combined with the lack of releases in the last 12 months, this is evidence of slowed maintenance.

Repo issue activitycaution

There are only two open issues and six open pull requests, but no issues or pull requests were opened or merged in the last month. This is a modest sign of limited current activity, not a severe abandonment signal.