stefna/http-runner

Release historydanger

This is the package's only release, published nearly three years ago, with no releases in the last 12 months. That leaves maintenance and compatibility confidence limited.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months. Combined with the single registry release, this is a meaningful maintenance and abandonment concern.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. This is a modest transparency and hygiene gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy. For a library, that reduces transparency about vulnerability reporting and handling.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers or audit findings, but all six action references are unpinned. Unpinned actions weaken build reproducibility and supply-chain hygiene.