php-http/socket-client

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. A January 2026 release shows the project is not abandoned outright, but the recent pause lowers confidence in ongoing maintenance.

Workflow auditcaution

All three workflows were analyzed, with no untrusted checkouts or script injection, but all nine action references are unpinned and three high-confidence unpinned-image findings were reported. This is a meaningful build-reproducibility and workflow-hygiene weakness, though it is not by itself evidence that the package is unsafe to depend on.