garygitton/tor-http-client
The dependency set is small, the package has a declared MIT license, and its repository is still available. Documentation is limited to a 17-character README, with no security policy or security scanning.
38%
Total Score
25
100
58
50
Health Score Breakdown
The package has made only one release, on January 9, 2018, with no releases in the last 12 months. This strongly indicates abandonment risk for a library dependency.
The repository recorded zero commits and zero active maintainers during the last three months, consistent with the package's long release gap.
The artifact includes a README, but it is only 17 characters long; tests and a changelog are absent, which is normal packaging practice and not itself a gap.
One issue remains open, while there were no new or closed issues and no pull-request activity in the last month. This provides no evidence of active project care.
The repository name matches the package, but the README does not mention the package name. This weakens package-to-repository transparency, though the matching repository name is a compensating sign.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/http-message Version ^1.0 | — | — |
megahertz/guzzle-tor Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 8 years ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.