html-escaper

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving publication origin less independently verifiable. This is a transparency gap, but not severe enough to outweigh the package's otherwise simple artifact.

Project backingcaution

The repository is owned by an individual user rather than an organization, so continued maintenance depends on a single project owner. This aligns with the observed lack of recent activity.

Release historycaution

The package has had no release in more than five years, with zero releases in the last 12 months. Its nine-release history shows prior maintenance, but the current pause lowers confidence in ongoing support.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release pause. This is a maintenance concern, though the package appears small and stable.

Repo toolingcaution

The repository uses Rollup and npm scripts for its build, showing an explicit build process. No security-scanning tooling is present, which is a minor hygiene gap for a small package.