evas-php/evas-http

Usable with caveats: the package is actively published, current, licensed, and backed by a matching organization repository. The main concerns are one-person commit activity, no repository tests or security policy, and very limited adoption evidence.

Latest 2.0.2

Packagist

72%

Total Score

Maintainer Stability

100

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Package scaffolding

The artifact includes a README, which is useful for this small library, but it is only 88 characters and the repository reports no tests or changelog. The absent tests reduce confidence in maintenance quality, while missing tests and changelog in the published artifact are normal.

Repo popularity

The repository has 4 stars, 0 forks, and 1 watcher, so independent adoption evidence is limited. Low popularity is supporting caution rather than a verdict because the package is small and shows recent activity.

Repo tooling

Composer is used as the build tool, but no security scanning tools are reported. Standard build tooling is appropriate, while the missing scanning is a modest transparency gap.

Security policy

The repository has no security policy, leaving vulnerability-reporting expectations unspecified. For a package handling HTTP requests and responses, this is a genuine but not severe transparency gap.