hwc-stimulus-fundamentals

No evidence of malicious behavior or supply-chain malware is present. The code is a legitimate Stimulus Outlets API example, but it has a security weakness: unescaped job fields are inserted into HTML via `insertAdjacentHTML`, which can enable XSS if the jobs value is attacker-controlled. Use DOM property assignments or an HTML-escaping routine, validate statuses, and use `CSS.escape(job.id)` for selector construction. Also handle missing outlet jobs and replace `break` with appropriate logic if all jobs should be processed.