php-http/adapter

Registry deprecationdanger

Packagist marks the entire package as abandoned and names php-http/httplug as its replacement. This is a severe adoption concern even though the linked repository remains available.

Release historycaution

The package has 14 releases since June 2015, but none in the last 12 months; the latest release was on September 23, 2024. That indicates the published package line is no longer receiving releases.

Repo commit activitycaution

The repository has zero commits and zero active maintainers in the three months measured, despite a later recorded push. This is limited evidence of current development and reinforces the stale package-release concern.

Repo toolingcaution

The project uses Composer for its build, but no security-scanning tools were detected. This is a modest transparency and maintenance gap, partly offset by the repository’s security policy and workflow audit.

Workflow auditcaution

Both workflows were analyzed and have no untrusted checkouts or script injection, but the audit found two high-confidence unpinned container-image findings and all 8 action references are unpinned. This weakens build reproducibility and workflow supply-chain hygiene.