Package Health/php-weather/http-provider

php-weather/http-provider

Clear licensing, documentation, tests, release notes, and organization backing support adoption. Check compatibility carefully when upgrading because this is an early-stage library with a narrow recent contribution base.

Latest 0.6.1

Packagist

66%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Repo bus factor

One contributor made all recent commits, leaving maintenance concentrated in a single person; organization ownership provides some backing but no second active contributor is shown.

Repo commit activity

Only 1 commit was recorded in the last 3 months, indicating limited recent development activity despite the repository remaining active.

Security policy

The repository has no security policy, which leaves vulnerability-reporting guidance unclear; this is a transparency gap, not evidence of unsafe code.

Version stability

Version 0.6.1 is a pre-1.0 release and the latest registry version is 0.6.1-rc.1, so interfaces may still change and compatibility is less predictable.

Workflow audit

Both workflows scope permissions read-only, but all 5 action references are unpinned and the release workflow installs a package outside a lockfile; these are supply-chain hygiene weaknesses without high-severity findings.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Dominik Schwind

Direct Dependencies

Dependency	Last Release	Score
php-weather/core Version ^0.4	—	—
php-http/discovery Version ^1.17	—	—
psr/http-client-implementation Version ^1.0	—	—
psr/http-factory-implementation Version ^1.0	—	—