Implementation of PSR-7 HTTP Message Interfaces and PSR-17 HTTP Factories
55%
Total Score
caution
Usable with caveats: no release or commit activity for over three years.
The repository is owned by an individual user rather than an organization, so the single registry maintainer does not have organizational backing to offset the lack of recent activity.
The package has had five releases, but none in the past three years; the latest release was published over three years ago. This materially raises abandonment risk despite the documented release history.
There were no commits and no active maintainers in the past three months, consistent with the absence of releases for over three years. This is a concrete maintenance and abandonment concern.
There were no new or closed issues or pull requests in the past month, with one issue still open. This supports the picture of an inactive project, though the short observation window is limited evidence.
The repository has two stars, no forks, and one watcher. Low adoption is only supporting evidence, but it provides little external activity to compensate for the lack of recent maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/http-factory Version ^1.0 | — | — |
psr/http-message Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.