httpx/tea
The source repository is still active, organization-backed, licensed, and tested, with clean workflow auditing. Use alibabacloud/tea instead because this package is marked abandoned.
22%
Total Score
100
60
50
Health Score Breakdown
Packagist marks the entire package as abandoned and explicitly names alibabacloud/tea as its replacement. This is a severe adoption risk even though the source repository remains active.
The package has 44 releases since June 2019, but it has had no registry release in the last 12 months and its latest registry release was May 16, 2023. That indicates the published package line has stalled.
The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.
The single workflow was fully analyzed with no reported findings or unsafe untrusted triggers, but all 3 action references are unpinned, which weakens build reproducibility.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Alibaba Cloud SDK |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 guzzlehttp/guzzle Version ^6.3|^7.0 | — | — |
adbario/php-dot-notation Version ^2.4 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.