pear/http_request2

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, which is a genuine maintenance-cadence concern, although the recent release and repository push provide partial compensating evidence.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected; the lack of scanning lowers assurance somewhat, while the repository still has build/static-analysis workflows.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations and response procedures undocumented.

Token permissionscaution

Both workflows lack top-level token-permission declarations, so least-privilege intent is not explicit; however, no workflow declares top-level write permissions and dangerous workflow patterns were not detected.