biano/react-http

Release historycaution

The registry reports 42 releases, including 42 in the last 12 months, but all releases are timestamped within about one minute and the package age is reported as zero days. This indicates the cadence data is unreliable rather than demonstrating mature release history.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. The missing scanner is a modest transparency gap, not evidence of unsafe code.

Security policycaution

The repository has no security policy file or documented security-policy source, leaving vulnerability reporting and response expectations unclear.

Workflow auditcaution

The sole workflow was fully analyzed with no untrusted checkouts, script injection, or audit findings, but all three action references are unpinned. The absence of a top-level permissions block is acceptable on its own, while unpinned actions remain a build-integrity hygiene gap.