j0k3r/httplug-ssrf-plugin

Project backingcaution

The package and repository are owned by an individual account rather than an organization, so the single-contributor concentration is not offset by visible organizational backing.

Release historycaution

The package has six releases since November 2017, but none in the last 12 months and the latest release is over a year old, indicating slowing maintenance.

Repo bus factorcaution

One contributor made all commits in the last three months, leaving maintenance dependent on a single active person.

Repo commit activitycaution

Only one commit was recorded in the last three months, so direct maintenance activity is currently sparse.

Security policycaution

No SECURITY.md or other repository security policy was found, leaving vulnerability reporting and handling less transparent.