vulnerar/http

Release historycaution

The package is only 46 days old and all 41 releases occurred in a single day, so the release record does not yet demonstrate sustained maintenance.

Repo bus factorcaution

One contributor made all commits during the measured period, giving the repository a concentrated maintenance base. Organization backing partly offsets handoff risk but does not show a second active contributor.

Repo commit activitycaution

Only two commits were recorded in the last three months, with activity from one maintainer, indicating sparse recent development.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving automated security hygiene less visible.

Security policycaution

The repository has no security policy, so vulnerability-reporting expectations and handling procedures are not documented.