php-http/react-adapter
Documentation, tests, and release notes are present, and the project has organizational backing. CI uses unpinned container images, which weakens build reproducibility.
61%
Total Score
67
92
100
Health Score Breakdown
The package has 14 releases since March 2016, but none in the last 12 months and the latest was in November 2022. This long release gap materially raises abandonment and compatibility risk.
The repository had zero commits and zero active maintainers in the last 3 months, consistent with the release gap. The repository is not archived, but current maintenance capacity is not demonstrated.
There were no new or closed issues or pull requests in the last month, with two issues still open. This supports the broader picture of inactive maintenance, though it is not severe on its own.
All 12 analyzed action references are unpinned, and four high-confidence findings identify unpinned container images in two workflows. There are no untrusted checkouts or script-injection findings, so this is a reproducibility and hygiene concern rather than a severe workflow risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Stéphane HULARD |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 react/http Version ^1.8 | — | — |
react/async Version ^4 | — | — |
php-http/httplug Version ^2.0 | — | — |
react/event-loop Version ^1.3 | — | — |
php-http/discovery Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.