inhere/http

Registry deprecationdanger

Packagist marks the entire package as abandoned and names php-comp/http-message as its replacement, creating a substantial maintenance and adoption risk.

Release historydanger

The package has 16 releases since 2017, but its latest registry release was in December 2021 and it had no releases in the last 12 months.

Repo commit activitycaution

The repository recorded no commits and had no active maintainers in the last three months, which is consistent with stalled ongoing development despite a later push being observed elsewhere.

Security policycaution

No repository security policy was found, leaving security-reporting guidance undocumented; this is a transparency gap but not decisive on its own.

Workflow auditcaution

Both workflows were fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all 4 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.