josefglatz/httpseverywhere

Maintainerscaution

Only one account has registry publish access, leaving little visible publishing redundancy. Because the project is user-owned, this is a real but moderate continuity concern rather than evidence of a missing organization.

Project backingcaution

The registry namespace and repository are both owned by the same individual, providing consistent ownership context. It does not provide the redundancy of organization backing.

Release historycaution

The package has six releases since September 2022, but no releases in the last 12 months; the latest release was nearly two years ago. Its earlier roughly three-day median interval shows it was previously active, which softens but does not remove the maintenance concern.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Combined with the old last push, this indicates a quiet project rather than current active maintenance.

Repo toolingcaution

Composer is used as the build tool, which fits the package, but no security scanning tool is configured. That leaves a modest transparency and maintenance-hygiene gap.