HTTP Uploading Client for PHP
60%
Total Score
caution
Usable with caveats: maintenance has stopped since November 2024 and all eight workflow actions are unpinned.
The package has made 10 releases since December 2020, but none in the last 12 months and the latest was on November 2, 2024. That long pause lowers confidence in ongoing maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the extended release gap and increasing abandonment risk.
The repository has 1 star, 0 forks, and 1 watcher, providing little independent evidence of broad adoption or review. This is supporting caution rather than a verdict by itself.
No security policy is present in the linked repository, leaving vulnerability-reporting and response expectations unclear for a package that handles file uploads.
The single workflow was fully analyzed with no dangerous triggers or audit findings, but all 8 action references are unpinned. That weakens build reproducibility and supply-chain hygiene without indicating a severe risk on its own.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/container Version 2.0.2 | — | — |
alex-kalanis/kw_files Version >=4.1 <5 | — | — |
alex-kalanis/kw_paths Version >=4.0 <5 | — | — |
alex-kalanis/kw_storage Version ~5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.