http_ece

Release historycaution

The package has 22 releases over roughly 11 years, but none in the last 12 months and its latest registry release was about two years ago. Recent repository commits partly compensate for the stale registry cadence.

Repo toolingcaution

No build tool or security scanning tool was detected. That weakens maintenance and security transparency, although the repository's active contributors provide some compensation.

Security policycaution

The repository has no published security policy. This is a transparency gap for a package implementing cryptographic content encoding, even though it does not establish a defect.

Workflow auditcaution

Both workflows use read-only permissions and the audit found no high-confidence dangerous findings, but all five action references are unpinned. Unpinned actions leave more room for unexpected upstream changes.