httpsoft/http-emitter
It has a focused package layout, repository tests, a README, and a security policy. Maintenance has gone quiet, and all six workflow actions are unpinned, so pin this version only with extra review.
62%
Total Score
75
88
100
Health Score Breakdown
The package has seven releases over roughly six years, but none in the last 12 months; the latest release was in December 2024. This indicates slowing maintenance, though the established release history provides some maturity.
The repository recorded zero commits and zero active maintainers in the last three months. That is a meaningful maintenance concern, although the package may be stable and has a recent release relative to the assessed history.
Both workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, or audit findings, but all six action references are unpinned. The clean audit offsets some risk, while fully unpinned actions remain a supply-chain hygiene gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Evgeniy Zyubin |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/http-message Version ^1.1|^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.