A JSON HTTP client library. This project also is the reference implementation for extending the PHP Basic HTTP Client.
18%
Total Score
critical
Unfit to use: Packagist marks the package abandoned and points to a replacement.
Packagist marks the entire package as abandoned and names chroma-x/json-http-client as its replacement, making this release unsuitable for a new dependency despite the repository remaining available.
The package has 17 releases over about 10 years, but none in the last 12 months; the latest release was about two years ago, which indicates stalled maintenance.
The repository recorded no commits and no active maintainers in the last three months, offering no evidence of ongoing maintenance capacity.
Composer build tooling is present, but no security scanning tools were detected; this is a minor hygiene gap rather than a decisive risk.
The repository has no published security policy, a transparency and reporting gap for a library that handles HTTP requests, though this is secondary to the package's abandoned status.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
chroma-x/basic-http-client Version ~4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.