Psr-http
57%
Total Score
caution
Usable with caveats: no releases or commits since August 2023.
The repository is owned by an individual account rather than an organization, so there is no demonstrated organizational backing to offset the small maintainer footprint.
The package has 14 releases, but none in the last three years; the latest release was on August 21, 2023. This is a meaningful maintenance concern despite the earlier rapid release cadence.
There were no commits and no active maintainers in the last three months, with the repository last pushed in August 2023. This weakens evidence of ongoing maintenance.
The repository has zero stars and forks and only one watcher, indicating limited visible adoption and community support. Popularity is supporting evidence rather than a standalone verdict.
The repository uses Composer and Make, but no security scanning tools were detected. The build tooling is useful, while the missing scanning is a modest hygiene gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
php-di/php-di Version ^7.0 | — | — |
psr/http-client Version ^1.0 | — | — |
bronsted/fiberloop Version ^2.0 | — | — |
kekos/multipart-form-data-parser Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.