The MIT license and clear README make the small client straightforward to evaluate and adopt. Its lack of security scanning leaves some maintenance transparency gaps. Pin this version and verify compatibility before relying on it in a maintained application.
42%
Total Score
0
70
50
The package has had only 3 releases, with none in the last 12 months; its latest release was about 9 years ago. The regular early release interval does not compensate for the long period without updates.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the package's long release hiatus. The repository is not archived, but there is no observed recent maintenance.
Composer is used as the build tool, but no security scanning tooling is present. For a small client this is a modest transparency and maintenance gap rather than a standalone adoption blocker.
The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This adds a transparency gap, although the package's inactivity is the larger concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
php-http/httplug Version ^1.0 | — | — |
php-http/discovery Version ^1.0 | — | — |
php-http/message-factory Version ^1.0 | — | — |
php-http/client-implementation Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.