http2-wrapper

Build provenancecaution

No build provenance attestation or trusted-publisher metadata was observed. This limits publication transparency, though it is not by itself evidence that the release is unsafe.

Release historycaution

The package has 59 releases and a mature history, but its latest release was nearly three years ago and it had no releases in the last 12 months. This indicates substantially slowed maintenance.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months. Combined with the old latest release, this is the clearest maintenance concern.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, with 13 open issues remaining. This is consistent with reduced project activity.

Repo toolingcaution

No build tools or security scanning tools were detected in the repository. This is a transparency and maintenance-hygiene gap, though the repository still has tests and CI.