jamm/http
The MIT license, tiny dependency surface, and matching repository make the package straightforward to inspect. Its single release and no commits since August 2015 indicate a long-abandoned library with little evidence of ongoing maintenance.
38%
Total Score
0
100
67
50
Health Score Breakdown
The package has only one release, published in April 2014, and none in the last 12 months. This is strong evidence of abandonment for a library dependency.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the last push being in August 2015. This materially increases maintenance and compatibility risk.
Composer is used as a build tool, providing normal ecosystem scaffolding. No security scanning tooling was found, which is a modest transparency and maintenance gap for a long-lived dependency.
The linked repository is not archived, which avoids an explicit abandonment marker. However, its last push was in August 2015 and does not offset the lack of recent commits.
The repository has no security policy. This is a hygiene gap and leaves no documented process for reporting vulnerabilities.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Eugene OZ |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 12 years ago
- Created
- 12 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.