dmt-software/http-client-middleware

Release historycaution

The package has had no releases in more than 2 years, despite 12 releases overall and a previously regular median interval of about 35 days. This is a meaningful maintenance concern for a dependency.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last 3 months. This supports the broader concern that current maintenance is limited, even though the repository was pushed recently according to its archive-status data.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The build setup is appropriate for the package, while the missing scanning adds a modest maintenance safeguard gap.

Security policycaution

The repository has no security policy, so vulnerability reporting and response expectations are not documented. This is a transparency gap, though it is not evidence of a security defect by itself.

Version stabilitycaution

The assessed release is v2.0.0, while the registry reports v1.1.0 as the latest version; although releases are stable and not prereleases, this version inconsistency reduces confidence in the published release state.