I agree, https to serve software (libraries included) is a must, even if the source is open. (That's not to get into the debate on whether or not to use https f

I agree, https to serve software (libraries included) is a must, even if the source is open. (That's not to get into the debate on whether or not to use https for everything, but I am a proponent of that as well). Since he's running his own server, it should be easy enough to add a certificate from https://letsencrypt.org/ https://letsencrypt.org/