html-minifier
Highly configurable, well-tested, JavaScript-based HTML minifier.
57%
Total Score
25
88
67
Health Score Breakdown
The latest registry release was April 2019, with no releases in the last 12 months; this long release gap is a substantial maintenance concern despite 82 historical releases.
The repository had zero commits and zero active maintainers in the last three months, reinforcing the abandonment concern raised by the old registry release.
There were no new or closed issues and no merged pull requests in the last month, while 86 issues and 21 pull requests remain open; this indicates limited recent project activity.
No repository security policy was found, leaving vulnerability-reporting expectations undocumented; this is a transparency gap but not a standalone dependency blocker.
Both workflows were fully analyzed with no dangerous triggers, untrusted checkouts, script injections, or audit findings. All five action references are unpinned, which creates a moderate build-reproducibility and action-update risk.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
CVE-2022-37620 html-minifier is vulnerable to Uncontrolled Resource Consumption in versions 0.0.0 - 4.0.0. | 0.0.0 - 4.0.0 | High |
Package versions
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 he Version ^1.2.0 | — | — |
clean-css Version ^4.2.1 | — | — |
commander Version ^2.19.0 | — | — |
relateurl Version ^0.2.7 | — | — |
uglify-js Version ^3.5.1 | — | — |
Weekly Downloads
Info
- Last Published
- 7 years ago
- Created
- 15 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.