xgerhard/nbheaders

Project backingcaution

The package and repository are owned by the same individual account, providing direct ownership alignment but no organizational backing to broaden maintenance capacity.

Release historycaution

The package has only 3 releases over roughly 7 years, with no releases in the last 12 months and the latest release in January 2022. This indicates slow maintenance for a dependency, though the small scope may reduce update needs.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap. That weakens evidence of active maintenance.

Repo toolingcaution

Composer is used for builds, but no repository security-scanning tool was detected. This is a modest transparency and hygiene gap, not a severe risk for this small package.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations unspecified. This is a minor transparency concern for a package that processes request headers.