Http client (psr-18), request and response object message interfaces (psr-7).
73%
Total Score
caution
Recent releases and repository activity are healthy, but all recent commits come from one contributor and no security policy is present.
The repository is owned by a user rather than an organization, so the single-contributor maintenance concentration is not offset by visible organizational backing.
All 11 recent commits came from one contributor, leaving maintenance highly dependent on a single person despite the recent activity.
The repository uses just and Composer for builds, but no security-scanning tools were detected, leaving a security-process gap.
No repository security policy is present, which weakens vulnerability-reporting transparency for a network-facing HTTP library.
Version 0.4.0 is not a stable-major release, so its API may still change, though it is not a prerelease and recent prerelease activity is absent.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
inanepain/file Version >=0.3.0 || dev-master || dev-develop | — | — |
psr/http-client Version * | — | — |
inanepain/stdlib Version >=0.6.0 || dev-master || dev-develop | — | — |
psr/http-message Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.