freezy-bee/httplug

Release historycaution

The package has had no release in about three years, after six releases over roughly nine years. That long pause is a meaningful maintenance concern, though the release history shows it was previously established.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months, consistent with the long gap since the latest release. This raises abandonment risk even though the repository is not archived.

Security policycaution

The repository has no security policy, leaving no published process for reporting or handling vulnerabilities. The package's tests and license provide some transparency but do not replace that process.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous audit findings, but both of its action references are unpinned. That leaves build inputs less reproducible and less protected from upstream action changes.