url-join

Project backingcaution

The repository is owned by an individual rather than an organization, so the small maintainer base does not benefit from visible organizational backing. This adds some continuity risk but is not severe on its own.

Release historycaution

The package has existed since January 2013 with 13 releases, but its latest registry release was in March 2022 and it has had no release in the last 12 months. This materially raises abandonment and freshness concerns.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. Combined with the long registry release gap, this is a meaningful maintenance concern.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, despite four open issues and three open pull requests. This suggests limited recent issue handling.

Security policycaution

The repository has no security policy. This is a transparency gap, but it is less significant for a small utility with no runtime dependencies and no install scripts.