brokeyourbike/http-enums

The package is small and easy to inspect, with a clear README, license, release notes, and only one runtime dependency. Its last release and repository push were in May 2023, while all eight workflow actions are unpinned and one uses an archived action.

Latest 2.0.1

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was in May 2023, and there were no releases in the following 12 months; this is a meaningful maintenance concern for a dependency, though the package has an established release history.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with activity having stopped after the May 2023 push.

Repo tooling

Composer build tooling is present, but no security-scanning tool was detected; this is a modest transparency and maintenance gap rather than a standalone severe risk.

Security policy

The repository has no security policy, leaving vulnerability-reporting expectations undocumented.

Workflow audit

All eight analyzed action references are unpinned, and one high-confidence medium-severity finding uses an archived action. Workflows were fully analyzed and have no untrusted checkout or script-injection findings, which limits the concern.