http-signature

Release historycaution

The project has a long history with 28 releases, but it has made no release in nearly three years, which raises maintenance and compatibility concerns.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating stalled maintenance.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, while 26 issues and 9 pull requests remain open; this suggests limited ongoing project attention.

Repo toolingcaution

The repository uses Make for builds, but no security scanning tools were detected; this is a modest transparency and maintenance gap rather than a severe risk.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting and response expectations unclear for a security-sensitive signing library.