phppkg/http-client

Release historycaution

The package has 12 releases since December 2021, but none in the last 12 months and the latest registry release was January 2023, which raises maintenance and abandonment concerns.

Repo commit activitycaution

There were zero commits and zero active maintainers during the last three months, which weakens evidence of ongoing maintenance despite the repository's recent push timestamp.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All eight analyzed action references are unpinned, so workflow dependencies can change without a reviewed commit; one workflow also grants top-level write permissions, though no untrusted checkout, injection, or high-confidence audit finding was reported.