bentools/test-http-client

Project backingcaution

The repository is owned by an individual rather than an organization, so the single registry maintainer and concentrated contribution pattern are not offset by formal organizational backing.

Repo bus factorcaution

Two contributors were active recently, but the leading contributor made two of three commits, leaving some concentration risk in this small project.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. This is a modest transparency gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented for consumers and maintainers.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all five action references are unpinned, which weakens build reproducibility and supply-chain hygiene.