httpsoft/http-app

Usable with caveats: the project is clearly backed, tested, licensed, and maintained with good repository hygiene, but it has had no release for about 21 months and no commits in the last 3 months. Depend on it only if its current, stable feature set is sufficient.

Latest 1.1.1

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Lifecycle scripts

The package defines post-install and post-update Composer scripts, which require some trust during installation; this is common for application templates but adds operational exposure compared with a package without install-time scripts.

Release history

The package has five releases since November 2020, but none in the last 12 months and the latest release was about 21 months ago. This is a meaningful maintenance concern, though not evidence of abandonment by itself.

Repo commit activity

There were zero commits and zero active maintainers in the last 3 months, indicating currently paused development and increasing the risk that issues or compatibility needs may not be addressed promptly.

Repo issue activity

There are no open issues or pull requests and no recent issue or pull-request activity. This is consistent with a small stable project, but it does not provide evidence of active ongoing maintenance.

Token permissions

Neither workflow declares top-level token permissions. No workflow requests write access, but explicit least-privilege permissions would provide stronger CI configuration hygiene.