fragotesac/zf1-http

Release historycaution

This is a single-release package, with no releases in the 740 days since September 2024. That limits evidence of ongoing maintenance and makes future compatibility less certain.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with an unmaintained or dormant project. Its tests and organization backing provide some context but do not demonstrate current activity.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting and response expectations unclear for an HTTP library. Its Dependabot configuration is a partial compensating hygiene measure.

Workflow auditcaution

All 5 analyzed action references are unpinned, and a high-confidence bot-conditions finding reports that actor context may be spoofable in the auto-merge workflow. The audit found no untrusted checkout or script injection, which limits the severity.