xmlhttprequest-ssl

Maintainerscaution

Only one registry publisher is listed, leaving a thin publishing base; the repository is user-owned rather than organization-backed, so there is no shown organizational compensation.

Release historycaution

The package has existed since 2015 with 16 releases, but it had no releases in the last 12 months, indicating slowed maintenance.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, a concrete sign that ongoing maintenance has slowed.

Repo toolingcaution

The repository reports no build tools and no security scanning, leaving limited evidence of repeatable builds or proactive security hygiene.

Security policycaution

The repository has no security policy, which reduces transparency about how vulnerability reports are handled.