waffle-commons/http

Repo bus factorcaution

Two contributors are active, but the leading contributor accounts for about 64% of recent commits, leaving some concentration risk.

Version stabilitycaution

The assessed release is a prerelease, and all recent releases are prereleases, so the API may still change and the package has not demonstrated stable-major maturity.

Workflow auditcaution

All 31 action references are unpinned, which weakens build reproducibility. The audit also found repeated low-confidence cache-poisoning patterns; with no untrusted checkout, injection, or broad write permissions, these remain hygiene concerns rather than a severe risk.