jbzoo/http-client

Repo bus factorcaution

All recent commits came from one contributor. Organization backing partly reduces handoff risk, but the observed recent activity still shows limited contributor breadth.

Repo commit activitycaution

There were two commits in the last three months, so development is still occurring, but the activity level is modest.

Repo toolingcaution

The project uses Composer and Make for builds, but no security-scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy. This does not show a maintenance failure by itself, but it weakens the project's documented process for handling security reports.

Workflow auditcaution

The workflow was fully analyzed, uses read-only permissions, and has no detected high-confidence audit findings. However, all 9 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.