dor/http
Dor Http Library
38%
Total Score
unhealthy
A single release from 2019 and seven years without commits indicate a largely abandoned package.
Health Score Breakdown
The package has only one release, published about 7 years ago, with no releases in the last 12 months. This is strong evidence of an immature or abandoned dependency.
The repository recorded 0 commits and 0 active maintainers during the last 3 months, consistent with the roughly 7-year release gap. No newer activity is provided to compensate for this.
The manifest declares GPL-3.0-only, while the detected LICENSE.md text is LGPL-3.0, creating a license mismatch that should be resolved before use. The presence of a license file is otherwise positive.
The repository has 0 stars, forks, and watchers. Popularity is supporting evidence rather than a verdict, but it provides no external sign of adoption to offset the inactive project.
The repository uses Composer build tooling, which supports reproducible project structure, but it has no security scanning tools. This is a modest hygiene gap rather than a standalone supply-chain concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Amir Aslan Aslani |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 7 years ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.