originphp/http-client

Release historydanger

The package has made no release in more than five years, despite a previously regular median release interval of about 36 days. This is strong evidence of stalled maintenance, although the package reached a stable 3.1.1 release.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the past three months, consistent with the release gap. The repository is not archived, but there is no recent activity showing ongoing maintenance.

Security policycaution

The linked repository has no security policy, leaving vulnerability reporting and response practices undocumented. This is a transparency gap, though it does not by itself indicate that the package is unsafe.

Workflow auditcaution

The only workflow was fully analyzed with no dangerous triggers or audit findings, but both of its two action references are unpinned. The missing top-level permissions block is acceptable on its own; unpinned actions remain a modest supply-chain hygiene concern.