kode/http

kode/http 3.4.20 appears usable and actively maintained, with 32 releases in 161 days, a stable non-prerelease version, recent repository activity, a substantial README, tests in both the artifact and repository, an explicit Apache-2.0 license, and no deprecation or install-time lifecycle scripts. The main concerns are the package's short history, all 25 recent commits coming from one contributor, no repository security policy or security-scanning tooling, and negligible repository adoption metrics; these make long-term maintenance and transparency less certain despite the strong current activity and package completeness.

Latest 3.4.20

Packagist

72%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry maintainer account, Kode Team, is listed. This is a modest publishing resilience concern, and the linked repository is user-owned rather than organization-owned, so there is no organizational backing shown to compensate for it.

Project backing

The repository is owned by the user account kodephp rather than an organization, so the observed single-maintainer concentration has no demonstrated organizational backing to offset it.

Release history

The package has 32 releases over 161 days, showing strong release activity, but the short overall history limits evidence of long-term maintenance maturity.

Repo bus factor

One contributor made all 25 commits in the last three months, creating a significant single-maintainer continuity risk. The repository owner is a user account, so no organization-backed handoff is shown to compensate for this concentration.

Repo issue activity

There are no open issues or pull requests and no recent issue or pull-request activity. This is ambiguous rather than clearly negative because it may reflect a small or quiet project, but it provides little evidence of community maintenance.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Kode Team

Direct Dependencies

Dependency	Last Release	Score
kode/context Version ^3.1	—	—
kode/exception Version ^3.0	—	—
psr/http-factory Version ^1.0	—	—
psr/http-message Version ^1.0\|^2.0	—	—
psr/http-server-handler Version ^1.0	—	—