node-html-parser

Build provenancecaution

No build attestation, trusted publisher identity, or staged publishing is reported, reducing release transparency and reproducibility evidence.

Lifecycle scriptscaution

A prepare install-time lifecycle script is present, which adds build or installation behavior that should be reviewed before adoption.

Maintainerscaution

Only one registry account has publish access, creating a publishing continuity concern; however, this is partly offset by the active multi-contributor repository shown by repo_commit_activity.

Project backingcaution

The source repository is owned by a user account rather than an organization, so maintenance continuity depends primarily on the observed individual and contributor activity.

Repo bus factorcaution

Six contributors were active, but the top contributor made about 73% of recent commits, leaving meaningful concentration risk; the repository is user-owned rather than organization-owned, so there is no organizational backing to fully offset it.