einar-hansen/http-sdk

Release historydanger

The package has had no release in about four years: its latest release was September 26, 2022, with zero releases in the last 12 months. Its early burst of 13 releases does not compensate for the prolonged absence of updates.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long gap since the last release and indicating substantial abandonment risk.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. That weakens ongoing maintenance assurance for a package that handles external HTTP APIs.

Security policycaution

The linked repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a transparency and maintenance concern, though not evidence of a vulnerability by itself.

Workflow auditcaution

Both workflows were fully analyzed with no dangerous triggers, sinks, or audit findings. However, all 6 action references are unpinned, which leaves build automation exposed to upstream action changes.