shoesten-tag/log-http

Release historycaution

The package has only two releases across about 23 months, with no registry release in the last 12 months. Repository activity later than the latest release is some compensating evidence, but release momentum remains limited.

Security policycaution

The repository has no security policy, reducing transparency for reporting and handling vulnerabilities. This is a documentation gap rather than evidence that the package is unsafe.

Workflow auditcaution

The sole workflow was fully analyzed and has no untrusted checkouts, injection findings, or write-wide permissions, but all 3 action references are unpinned. That leaves avoidable build-integrity exposure.