jasny/http-signature
Clear documentation, tests, licensing, and a stable release make integration straightforward. Maintenance has been inactive since June 2019, with no security policy or security scanning visible.
58%
Total Score
75
79
75
Health Score Breakdown
The package has six releases since February 2019, but its latest release was in June 2019 and there were no releases in the last 12 months. This long inactivity materially raises maintenance and abandonment risk.
There are five open issues, but no new or closed issues and no pull-request activity in the last month. This is consistent with the broader evidence of an inactive project.
Composer build tooling is present, but no security scanning tools were detected. For a library implementing request-signature behavior, that weakens ongoing security-maintenance transparency.
The repository has no security policy. This is a transparency and vulnerability-reporting gap, although it is not equivalent to evidence of a security defect.
No GitHub Actions workflows were present, so the audit found no workflow hazards; it also provides no evidence of automated CI or release safeguards.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Arnold Daniels |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 nesbot/carbon Version ^2.12 | — | — |
psr/http-factory Version ^1.0 | — | — |
psr/http-message Version ^1.0 | — | — |
improved/improved Version ^0.1.0 | — | — |
psr/http-server-handler Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 7 years ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.