php-comp/http-client

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement identified beyond the same package name. This is a substantial adoption and support risk despite other healthy project evidence.

Release historydanger

The package has 12 releases since November 2018, but none in the last three years and none during the last 12 months. That weakens confidence in ongoing release maintenance.

Repo commit activitycaution

There were no commits or active maintainers in the last three months, indicating no recent development activity. The recent repository push recorded elsewhere is a positive counter-signal but does not establish a sustained cadence.

Security policycaution

The repository has no security policy. This is a transparency gap for a network-facing HTTP client, although automated security tooling is present.

Workflow auditcaution

All three workflows were analyzed with no untrusted checkouts, script injection, or auditor findings. However, all eight action references are unpinned and one workflow grants top-level write access, creating a moderate reproducibility and workflow-hygiene concern.