Package Health/bangpound/legacy-php-http-kernel

bangpound/legacy-php-http-kernel

Risky to adopt: the package has not released or received repository commits since April 2014, so maintenance and compatibility support are unlikely. It does have a clear MIT license, documentation, tests, and a small dependency footprint, but those strengths do not offset the long abandonment risk.

Latest 1.1.1

Packagist

45%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was in April 2014, with no releases in the last 12 months and only three releases overall. This is a substantial abandonment and compatibility risk for a dependency.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the release history showing roughly twelve years without updates. This strongly lowers confidence in ongoing maintenance.

Repo popularity

The repository has zero stars and forks and only two watchers. Popularity is supporting evidence rather than a verdict, but these counters provide little evidence of a broad or active user community.

Repo tooling

Composer is used for builds, which fits the package ecosystem, but no security scanning tooling is present. This is a transparency gap, though it is secondary to the much larger maintenance concern.

Repository archived

The repository is not marked archived, which avoids an explicit abandonment marker, but its last push was in April 2014 and therefore does not compensate for the lack of recent activity.