Package Health

pac/lean-http

The package has a clear MIT license, tests, a changelog, a substantial README, and read-only workflow permissions. Maintenance evidence is thin: it has only one release, no commits in three months, one maintainer, no security scanning, and all seven workflow actions are unpinned.

Latest 1.0.0PackagistPackagist

58%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

83

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

67

Health Score Breakdown

Maintainerscaution

One registry maintainer is publishing the package. The linked repository is user-owned rather than organization-backed, so there is no provided evidence of a broader maintainer base to compensate for the single-person dependency.

Project backingcaution

The repository is owned by an individual user, not an organization. That is consistent with a small package but offers less visible institutional backing for continuity.

Release historycaution

This is the only release, published 233 days ago, so there is no demonstrated release cadence or evidence of continued delivery. That makes long-term maintenance uncertain for a library dependency.

Repo commit activitycaution

There were zero commits and zero active maintainers during the last three months. For a package released only once, this is meaningful evidence that ongoing maintenance has not yet been demonstrated.

Repo popularitycaution

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these counts provide no external adoption signal to offset the limited maintenance history.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Pedro Amaral Couto

Direct Dependencies

DependencyLast ReleaseScore
psr/http-message
Version ^2.0

Weekly Downloads

Info

Last Published
7 months ago
Created
7 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform