m6web/guzzle-http-bundle

Repo bus factorcaution

One contributor made all commits in the last three months. The organization-owned project provides some handoff capacity, but no second recently active contributor is shown.

Repo commit activitycaution

Only one commit was recorded in the last three months, showing thin recent maintenance despite the recent release and repository update.

Repo toolingcaution

The project uses Make and Composer, but no security-scanning tooling was detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, which makes vulnerability-reporting expectations less clear for a dependency used in applications.

Workflow auditcaution

The workflow audit completed cleanly with no dangerous triggers or audit findings, but all 11 action references are unpinned, weakening build reproducibility and supply-chain hygiene.