parse5-sax-parser

Release historycaution

The package is mature with seven releases, but it has had no registry release in the last 12 months and its median release interval is about 10 months, indicating slow delivery.

Repo bus factorcaution

All six recent commits came from one contributor, creating a meaningful concentration and handoff risk; the repository owner is an individual rather than an organization.

Repo commit activitycaution

The repository had six commits in three months, so work continues, but the volume is modest relative to the package's long history.

Workflow auditcaution

All workflows were analyzed, all 12 action references are pinned, and no untrusted checkout or script injection was found. One high-confidence bot-conditions finding and a workflow with top-level write permissions are hygiene concerns, but no dangerous sink was identified.