monolith/http
The focused codebase has organization backing, no install-time scripts, and a stable release line. The missing license and absent security policy reduce transparency, while the lack of recent development makes long-term support uncertain.
55%
Total Score
50
100
71
88
Health Score Breakdown
The package has 71 releases since September 2018, but none in the last 12 months and its latest release was in September 2022, nearly four years ago. This indicates a mature history but substantially increases abandonment risk.
There were no commits and no active maintainers in the last three months. Combined with the old last push, this is strong evidence that active maintenance has stopped.
No declared license, license file, or repository license file was detected. Without licensing terms, dependency use has a material legal and transparency risk.
Composer is used for builds, but no security-scanning tooling is present. This is a modest transparency and maintenance gap rather than a decisive adoption blocker.
The repository has no security policy. That weakens disclosure transparency and gives consumers no documented process for handling vulnerabilities.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 monolith/collections Version ^10 | — | — |
monolith/component-bootstrapping Version ^9 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.