free-elephants/static-http-client

Release historycaution

The package has made no release in the last 12 months, and its latest release was about 17 months ago. This indicates a meaningful maintenance concern for a young package, despite three releases being published close together initially.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. The repository is not archived, but current maintenance activity is absent.

Repo toolingcaution

The repository uses Make and Composer build tooling, but no security scanning tools were detected. That is a modest hygiene gap rather than evidence that the release is unsafe to depend on.

Security policycaution

No security policy was found in the repository. For a small testing utility this is a transparency gap, although the package's limited scope reduces its practical impact.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all four action references are unpinned, weakening build reproducibility and supply-chain hygiene.