he
A robust HTML entities encoder/decoder with full Unicode support.
27
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
mathias
Keywords
stringentitiesentityhtmlencodedecodeunicode
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| typosquat | typosquat.levenshtein:pg | AI (typosquat): 'he' is a well-established HTML entity library by Mathias Bynens, not a typosquat of 'pg'. Short package names legitimately trigger Levenshtein matches. | ai | |
| typosquat | typosquat.levenshtein:qs | AI (typosquat): 'he' is a well-established HTML entity library by Mathias Bynens, not a typosquat of 'qs'. Short package names legitimately trigger Levenshtein matches. | ai | |
| semgrep | semgrep:eval-usage | AI (semgrep): eval() in src/data.js is used in a build-time data generation script to sort known Unicode entity strings — not user-supplied input. Legitimate use in this well-known HTML entity library. | ai | |
| provenance | missing-githead | AI (provenance): he is a long-established package by a trusted publisher; missing gitHead is a metadata artifact of older publish tooling, not a malicious indicator. | ai | |
| provenance | no-provenance | AI (provenance): Package predates Sigstore provenance attestation; absence is expected for this era of publishing and does not indicate risk for this well-known package. | ai |
Versions (showing 27 of 27)
| Version | Deps | Published |
|---|---|---|
| 1.2.0 | 0 / 14 | |
| 1.1.1 | 0 / 12 | |
| 1.1.0 | 0 / 12 | |
| 1.0.0 | 0 / 12 | |
| 0.5.0 | 0 / 12 | |
| 0.4.1 | 0 / 12 | |
| 0.4.0 | 0 / 11 | |
| 0.3.6 | 0 / 10 | |
| 0.3.5 | 0 / 10 | |
| 0.3.4 | 0 / 10 | |
| 0.3.3 | 0 / 10 | |
| 0.3.2 | 0 / 10 | |
| 0.3.1 | 0 / 10 | |
| 0.3.0 | 0 / 10 | |
| 0.2.1 | 0 / 10 | |
| 0.2.0 | 0 / 10 | |
| 0.1.10 | 0 / 10 | |
| 0.1.9 | 0 / 10 | |
| 0.1.8 | 0 / 11 | |
| 0.1.7 | 0 / 11 | |
| 0.1.6 | 0 / 11 | |
| 0.1.5 | 0 / 11 | |
| 0.1.4 | 0 / 11 | |
| 0.1.3 | 0 / 11 | |
| 0.1.2 | 0 / 11 | |
| 0.1.1 | 0 / 11 | |
| 0.1.0 | 0 / 11 |