headers-polyfill

Maintainerscaution

Only one registry account has publish access, which is a modest resilience concern, but the repository is organization-owned and the release has provenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which is a maintenance concern, though the release history and June push provide some compensating evidence.

Repo toolingcaution

The project uses TypeScript, Vitest, and build scripts, but no security scanning tools were detected, leaving a modest repository-hygiene gap.

Security policycaution

No security policy was found in the repository, reducing transparency for vulnerability reporting.

Workflow auditcaution

Both workflows were analyzed without dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all six action references are unpinned, so their exact revisions are not fixed.