innmind/html

Repo bus factorcaution

All 4 recent commits came from one contributor, so maintenance is concentrated. Organization backing provides some handoff capacity, but no second recent contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. The missing scanning is a modest transparency and maintenance gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy. For a library that processes HTML, this leaves vulnerability-reporting guidance unclear.

Workflow auditcaution

All 6 analyzed action references are unpinned, and high-confidence secrets-inherit findings affect the CI and release workflows. There are no untrusted checkouts or script-injection findings, limiting the severity.