waughj/security-headers

Release historydanger

The package has had only two releases, with none in the last 12 months; its latest release was in December 2019, indicating substantial abandonment risk.

Licensecaution

The manifest declares GPL-3.0-or-later, while the artifact license file was detected as AGPL-3.0. Although license files are present, the mismatch requires clarification before adoption.

Package scaffoldingcaution

A README and release notes for this version are present, but the package has no tests or repository changelog. The release notes partly compensate for the missing changelog, while the lack of tests remains a modest maturity gap.

Repo popularitycaution

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these values provide no indication of a wider user or contributor base.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are reported. For a package that sets security headers, the absence of automated security tooling is a relevant hygiene gap.