A spec-conformant JavaScript parser for the HTML5 srcset attribute
58%
Total Score
33
100
88
83
50
There were zero commits and zero active maintainers in the last three months. Together with the old registry release, this indicates sustained inactivity.
No build provenance attestation or trusted-publisher setup is present. This reduces publication transparency, although it is a secondary concern for this small source package.
Only one registry maintainer is listed. The linked repository is user-owned rather than organization-backed, so there is limited visible publishing redundancy.
The latest registry release was in December 2016, with no releases in the last 12 months. This is a substantial maintenance concern for a dependency, though the small stable package may need few changes.
There were no new or closed issues or pull requests in the last month, while one issue and one pull request remain open. This suggests limited ongoing project engagement.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.