php-http/promise

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. For a mature, stable package this may reflect low change demand, but it still raises maintenance and abandonment caution.

Repo issue activitycaution

The repository has only one open issue and two open pull requests, with no issues or pull requests opened or merged in the last month. Low workload is reassuring, but the absence of recent merges provides little evidence of active maintenance.

Repo toolingcaution

Composer is used for the build, but no security-scanning tool was detected. The missing scanner is a hygiene gap rather than evidence that the release is unsafe.

Version stabilitycaution

This is a stable major-line release and not a prerelease, with only a small recent prerelease share. The reported latest version differs from the assessed version, so version metadata is not fully consistent.

Workflow auditcaution

The audit covered the sole workflow completely and found no high-, medium-, or low-confidence findings, with no untrusted checkout or injection sinks. However, all six action references are unpinned, leaving avoidable workflow supply-chain drift.