php-standard-library/http-message

Name lookalikecaution

The package has high artifact overlap with the established lookalike, but neither the artifact nor README claims to be that project. The exact repository match and lack of identity borrowing avoid a danger finding, though the resemblance warrants caution.

Release historycaution

This is a young package, but it has three releases over 124 days, including a release today; that shows recent publishing activity without yet demonstrating long-term maturity.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a meaningful maintenance concern despite the recent release and push.

Repo issue activitycaution

No issues or pull requests were opened or closed in the last month. For a package only 124 days old this is limited evidence of community activity, not proof of abandonment.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository hygiene gap.