kylekatarnls/html-object

Name lookalikedanger

The package is flagged as borrowing the identity of kylekatarnls/update-helper, which is strong supply-chain evidence even though artifact overlap is 0.0 and the README describes this project as a fork of a different package.

Release historydanger

The package has 14 releases but none in the last 12 months; its latest release was over three years ago. This substantially raises abandonment risk despite its long history.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last three months, providing no recent evidence of active maintenance.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.

Workflow auditcaution

All seven analyzed action references are unpinned, which weakens build reproducibility. The audit found no dangerous triggers, untrusted checkouts, script injection, or high-severity findings, so this is a hygiene concern rather than a severe workflow risk.