ext/http

Licensedanger

The manifest declares MIT, but the artifact license file is detected as GPL-2.0. Although a license file is present, the mismatch creates material uncertainty about the terms developers may receive.

Package scaffoldingcaution

The package includes a README, and the repository has tests, but the published README is only 464 characters and remains an unfilled template with placeholder installation and usage content. That weakens consumer transparency for a library.

Release historycaution

All four releases occurred within roughly six hours on October 30, 2025, followed by no later release despite the package being about 11 months old. This suggests an initial burst rather than an established release cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. With no newer release activity to compensate, this is evidence of limited ongoing maintenance.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a modest transparency and maintenance-process gap, not evidence of malicious behavior.