packaged/http

packaged/http is a mature, stable MIT-licensed package with a 10-year history, 43 releases, a current non-prerelease version, a matching organization-backed repository, tests, CI, and no deprecation or archived-repository indicators. However, recent commit activity is absent despite only one release in the last 12 months, and the repository lacks a security policy, security-scanning tooling, and explicit workflow token permissions. These are meaningful transparency and maintenance concerns, but they are partly offset by the repository being recently pushed, having four recently merged pull requests, and containing a complete test suite, so the package is usable with moderate caution rather than clearly unfit.

Latest 2.0.1

Packagist

72%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has existed for 3712 days with 43 releases and a latest release on the assessment date, supporting maturity; only one release in the last 12 months suggests a slower current release cadence.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, a meaningful current-maintenance warning; the recently pushed repository and four merged pull requests provide only partial compensation.

Repo popularity

The repository has zero stars and four forks, indicating limited adoption evidence; popularity is supporting evidence only and does not outweigh the package's other health signals.

Repo tooling

Composer build tooling is present, but no security-scanning tools were detected, leaving a security-process gap.

Security policy

The repository has no security policy, reducing transparency about vulnerability reporting and response procedures.