webtheory/http-policy

Release historydanger

This is the package's only release, published over four years ago, with no releases in the last 12 months. That strongly increases abandonment risk.

Repo commit activitydanger

There were no commits and no active maintainers in the last three months, consistent with the repository last being pushed over four years ago.

Lifecycle scriptscaution

A post-install command runs during installation, creating some supply-chain and reproducibility exposure even though no malicious behavior is established here.

Maintainerscaution

One registry maintainer is consistent with a small user-owned project, but it provides limited publishing redundancy when combined with the lack of recent activity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a small library this is a modest hygiene gap rather than a severe risk.