setono/html-element

Repo commit activitydanger

There were no commits and no active maintainers in the last three months, consistent with the last push being over two years ago. This is the strongest abandonment concern in the assessment.

Release historycaution

The package has only two releases, with none in the last 12 months and a median interval of about 323 days. This indicates a very slow release cadence and lowers confidence in ongoing maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning reduces repository hygiene and supply-chain transparency.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, though it is not evidence of a vulnerability by itself.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all 18 action references are unpinned. That leaves the build exposed to upstream action changes and is a meaningful reproducibility concern.