hyperf/http-message
The package has a long release history, a stable major version, tests, and a clear MIT license. Organization backing and a security policy add useful accountability; its dependency set is substantial but coherent.
68%
Total Score
75
100
94
100
Health Score Breakdown
The repository recorded zero commits and zero active maintainers in the last three months. This is a maintenance concern, although the recent release and long release history provide some compensation.
Composer is used for the build, but no security scanning tool was detected. The absence of scanning is a modest transparency gap rather than evidence of abandonment.
Both analyzed workflows use unpinned actions, so all 2 of 2 action references lack revision pinning. The pull_request_target workflow has no untrusted checkout or script-injection sink, so this is a hygiene caution rather than a severe risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 hyperf/codec Version ~3.2.0 | — | — |
hyperf/engine Version ^2.11 | — | — |
hyperf/context Version ~3.2.0 | — | — |
hyperf/support Version ~3.2.0 | — | — |
swow/psr7-plus Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.