html-url-attributes

Build provenancecaution

No build attestation or trusted-publisher provenance was recorded, which limits publication transparency, though this is not by itself evidence of an unsafe release.

Release historycaution

The package has existed since 2016 with seven releases, but no releases were published in the last 12 months and the median interval is about 13 months, indicating a slow cadence.

Repo commit activitycaution

No commits or active maintainers were recorded in the three months measured, which weakens evidence of current maintenance despite the repository remaining unarchived.

Repo package mentioncaution

The repository name does not match html-url-attributes and its README does not mention the package, so the linkage is less transparent even though a name mismatch alone can occur in a monorepo.

Repo toolingcaution

The project uses TypeScript and npm build tooling, but no security scanning tools were detected, leaving a modest repository-hygiene gap.