nih/http-kernel

Release historycaution

The package is about five months old with five releases, all within roughly one week and a median interval of about eight hours. This shows an active launch period but not yet a sustained maintenance record.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, despite being a young project. The recent push associated with the latest release provides only limited evidence of ongoing maintenance.

Repo popularitycaution

The repository has three stars, no forks, and no watchers. Popularity is only supporting evidence, but these counts provide little external validation for a new dependency.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. That is a modest transparency and maintenance gap for a package intended to handle HTTP application runtime behavior.

Security policycaution

The repository has no security policy. This makes vulnerability-reporting expectations less clear, although the absence does not by itself show that the package is unsafe.