csrf

Release historycaution

The package has existed since 2012 with 18 releases, but it has had no registry release in roughly seven years. That long release gap is a meaningful maintenance concern despite its mature history.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. Combined with the old registry release, this indicates limited active development and lowers confidence in ongoing maintenance.