php-http/mock-client

Release historycaution

The package has 20 releases since December 2015, but none in the last 12 months; its latest release was October 31, 2024, nearly two years before collection. This is meaningful maintenance caution despite the long project history.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the long release gap, this raises the risk that maintenance has slowed, although it does not establish abandonment on its own.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This modestly reduces transparency around automated security checks without indicating that the package is unsafe.

Workflow auditcaution

The sole workflow was fully analyzed with no untrusted checkouts, injection findings, or write permissions, but all 6 action references are unpinned. That is a workflow hygiene gap rather than a severe supply-chain risk.