bloatless/endocore-http

The small dependency set, tests, release notes, MIT license, and matching repository make the package easy to evaluate. Missing security scanning and a security policy add a smaller transparency gap.

Latest v0.0.1

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This is the only release, published nearly seven years ago, with no releases in the last 12 months. That strongly raises abandonment risk.

Repo commit activity

The repository has had no commits and no active maintainers in the last three months, consistent with a project that has not been maintained since its initial release.

Repo tooling

Composer is used for build and dependency tooling, but no security scanning tool is configured. This is a modest maintenance and transparency gap rather than a severe risk.

Security policy

The repository has no security policy, leaving vulnerability-reporting expectations undocumented. This matters for transparency but does not outweigh the stronger abandonment evidence.

Version stability

The package remains at v0.0.1, indicating an early-stage release with limited demonstrated maturity. The presence of tests and release notes provides some compensation but not enough to remove the concern.