xhr2

Repo commit activitydanger

The repository has had zero commits and zero active maintainers in the last three months, consistent with the long gap since the latest release and raising a material abandonment concern.

Build provenancecaution

No build attestation or trusted publisher provenance is available, which reduces publication transparency, though this is not by itself evidence that the release is unsafe.

Maintainerscaution

Only one registry account has publish access, leaving limited publishing redundancy; the linked repository is user-owned, so this is a genuine resilience concern rather than normal organizational publishing hygiene.

Project backingcaution

The repository is owned by an individual user rather than an organization, so there is no organizational backing shown to compensate for the single maintainer or inactive development.

Release historycaution

The project has 14 releases over more than 13 years, but it has made no release in the last 12 months and its latest release was over five years ago, indicating abandonment risk.