aplus/http

The package has repository tests, a matching source project, an MIT license, and a published release note. All four workflow actions are unpinned, security scanning is absent, and reported recent commit activity is zero.

Latest v6.6.1

Packagist

70%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

100

Health Score Breakdown

Release history

The package has 105 releases since July 2021, but only 2 releases in the last 12 months, indicating a slower current cadence without abandonment by itself.

Repo commit activity

The repository reports zero commits and zero active maintainers during the last 3 months. This weakens evidence of ongoing maintenance, although the separate recent push and release history provide some counterweight.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. That is a maintenance and transparency gap rather than evidence that the package is unsafe.

Workflow audit

The sole workflow was fully analyzed with no audit findings or untrusted checkouts, but all 4 action references are unpinned. The workflow also lacks a top-level permissions block, which is acceptable on its own.