goognet/vite-plain-html

Release historycaution

The package is newly published, with one release in the last 12 months and no established release interval. That leaves maintenance and compatibility history unproven.

Repo commit activitycaution

There were no commits or active maintainers during the measured three-month window, but the project is only hours old, so this is limited evidence rather than proof of abandonment.

Security policycaution

The repository has no security policy. For a runtime package, that weakens transparency about vulnerability reporting and response.

Version stabilitycaution

Version v0.1.0 is not a stable major release, so its API and behavior may still change. There is no prerelease label to add further concern.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but both of its action references are unpinned. The missing top-level permissions block is acceptable on its own.