fengyongz-guzzlehttp/psr7
The package is well documented and licensed, with repository tests and a small dependency set. Its project has had no releases or commits since April 2020, and the workflows use unpinned container images, leaving limited evidence of ongoing maintenance.
42%
Total Score
0
100
81
67
Health Score Breakdown
The package has had no release in more than six years and no releases in the last 12 months, which is strong evidence of abandonment for a dependency that may need ongoing fixes.
The repository recorded zero commits and zero active maintainers in the last three months, confirming that maintenance has stopped rather than merely slowed.
The repository has zero stars, forks, and watchers, providing no community adoption or review signal to compensate for the lack of recent maintenance.
The repository has no security policy or documented reporting path, reducing transparency for a package that handles HTTP messages and may receive security-relevant fixes.
All 7 analyzed action references are unpinned, and four high-confidence findings identify unpinned container images in two workflows. There are no untrusted checkouts or script injections, so this is a significant hygiene concern rather than a standalone severe risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Michael Dowling |
| Tobias Schultze |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/http-message Version ~1.0 | — | — |
ralouphie/getallheaders Version ^2.0.5 || ^3.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 7 years ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.