fapi-cz/http-client

Release historycaution

The package has existed for about 7 years with 15 releases, but only one release appeared in the last 12 months and the median interval is about 6 months, indicating a slow cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last 3 months. The recent release push partly offsets this, but the lack of ongoing activity raises maintenance risk.

Repo toolingcaution

The repository uses Make and Composer build tooling, but no security-scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities.

Workflow auditcaution

The workflow audit completed successfully with no dangerous triggers, untrusted checkouts, script injection, or reported findings. However, all 21 action references are unpinned, which leaves the build exposed to moving action versions.