ez-php/http-client

The codebase includes tests, a changelog, and automated dependency auditing. Maintenance is active, but all 82 recent commits came from one contributor and all eight workflow actions are unpinned; the organization backing helps but does not remove those concerns.

Latest 2.5.6

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

100

Supply Chain

Health Score Breakdown

Repo bus factor

One contributor made all 82 recent commits, creating a meaningful continuity risk. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activity

The repository recorded 82 commits in the last 3 months, showing active development, but only one maintainer was active during that period.

Security policy

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear.

Workflow audit

The sole workflow was fully analyzed with no untrusted checkout or script-injection findings and job-level permissions, but all 8 action references are unpinned, weakening build reproducibility and update control.