transform stream to tokenize html
57%
Total Score
50
83
100
50
No build attestation, trusted publisher identity, or staged publishing evidence is present. This limits release transparency, although the package file tree and license provide some compensating artifact visibility.
Five runtime dependencies are a moderate dependency surface for a small stream-processing library. It is not excessive on its own, but each dependency adds some maintenance exposure to an already inactive package.
The package is mature, with 12 releases since April 2014, but its latest release was in March 2020 and it had no releases in the last 12 months. The long inactivity period is a meaningful maintenance concern.
No type declarations are included, which makes integration less convenient for TypeScript consumers of this library. The package still provides documentation and examples, but that does not replace machine-readable types.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
inherits Version ~2.0.1 | — | — |
minimist Version ~1.2.5 | — | — |
through2 Version ~0.4.1 | — | — |
buffer-from Version ~0.1.1 | — | — |
readable-stream Version ~1.0.27-1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.