phppkg/http-message

Release historydanger

The package has had no release in nearly five years and none in the last 12 months, indicating substantial release inactivity despite 16 historical releases.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which weakens evidence of ongoing maintenance.

Security policycaution

The linked repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All four analyzed action references are unpinned, which weakens build reproducibility. However, both workflows were fully analyzed and the audit found no untrusted checkout, injection, or high-severity workflow issue.