http-parser-js

Build provenancecaution

No build attestation or trusted-publisher provenance is reported. This limits publication transparency, although the package is a small artifact with no lifecycle install scripts.

Project backingcaution

The repository is owned by an individual account rather than an organization, so there is no organizational backing signal to compensate for the thin current maintenance activity.

Release historycaution

The package has 32 releases over more than 14 years, but none in the last 12 months. The long history helps maturity, while the current pause is a maintenance caution.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. With no recent registry releases either, this materially raises the risk that maintenance has slowed or stopped.

Repo issue activitycaution

There are only five open issues and one open pull request, but no new or closed issues or pull requests in the last month. This is modest corroboration of limited current activity, not a severe abandonment signal.