99designs/http-signatures-guzzle

Release historydanger

The latest release was published on October 17, 2016, and there were no releases in the last 12 months; nearly ten years without a release is a strong abandonment concern.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and weak evidence of ongoing support.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected, leaving an additional maintenance and vulnerability-management gap.

Repository archivedcaution

The linked repository is not archived, which avoids the strongest abandonment marker, but its last push was also on October 17, 2016.

Security policycaution

No security policy was found, reducing transparency about how vulnerabilities are reported and handled; the absence is more relevant for an HTTP-signing library than for a purely internal utility.