crell/response-builder
The repository is not archived and includes tests, a license, and a security policy. However, release and commit activity stopped over a year ago, and the registry points users to crell/http-tools instead.
18%
Total Score
50
100
67
83
Health Score Breakdown
Packagist marks the package abandoned at package scope and explicitly names crell/http-tools as the replacement, making this release unsuitable for a new dependency.
The package has had no releases in the last 12 months, with the latest release over a year ago; this supports an abandonment concern.
The repository recorded zero commits and zero active maintainers in the last three months, indicating no recent maintenance capacity.
The repository name does not match the package name and its README does not mention the package, creating some uncertainty about package-to-repository alignment.
The single workflow was fully analyzed with no audit findings or untrusted triggers, but all four action references are unpinned and the workflow lacks a top-level permissions block.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Larry Garfield |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/http-factory Version ^1.1 | — | — |
psr/http-message Version ^1.0|^2.0 | — | — |
psr/http-server-handler Version ^1.0 | — | — |
psr/http-server-middleware Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.