Parse HTML character references
42%
Total Score
75
100
83
83
Artifact overlap with `entities` is 1.0, indicating a near-complete match even though the README does not identify it as a lookalike or fork; consumers may have intended the established package instead.
The package has 15 releases over roughly 11 years but none in the last 12 months; the latest release was published in December 2024, indicating a meaningful maintenance slowdown.
The repository recorded zero commits and zero active maintainers in the last three months, which weakens evidence of current maintenance despite the repository being active recently overall.
The single workflow was fully analyzed with no audit findings or dangerous triggers, but all three action references are unpinned, leaving dependency versions less reproducible.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
is-decimal Version ^2.0.0 | — | — |
@types/unist Version ^2.0.0 | — | — |
is-hexadecimal Version ^2.0.0 | — | — |
is-alphanumerical Version ^2.0.0 | — | — |
character-entities-legacy Version ^3.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.