caridea/http
The library has clear documentation, tests, a license, and a small dependency surface. Its missing security policy and absent security scanning add transparency concerns, while the long inactivity leaves maintenance and compatibility risk for adopters.
35%
Total Score
0
100
79
50
Health Score Breakdown
The latest release was about eight years ago, with no releases in the last 12 months. Although five releases over the package's lifetime show prior maintenance, the prolonged release gap is a strong abandonment concern.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the roughly eight-year release gap and providing no evidence of current maintenance.
Composer build tooling is present, but no security-scanning tooling was detected. The build setup supports reproducibility while the missing scanning reduces maintenance hygiene.
No security policy was found in the repository, leaving the project's vulnerability-reporting process unclear. This is a transparency gap, though not evidence that the package is unsafe.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Caridea Contributors |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/http-message Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 8 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.