psr-discovery/http-client-implementations
The project has no commits in the last three months and only one release in the past year, despite a recent release. Its automated checks use unpinned actions and include one high-confidence unpinned container image finding; organization backing, tests, release notes, and security scanning provide useful reassurance.
72%
Total Score
88
100
94
83
Health Score Breakdown
The package is over three years old with seven releases, but only one release occurred in the last 12 months. The latest release is recent, so this indicates a quiet rather than abandoned release cadence.
The repository recorded zero commits and zero active maintainers in the last three months. The recent release partly offsets this, but the current maintenance capacity remains unclear.
The repository has no security policy. For a library that discovers and instantiates HTTP clients, this is a transparency gap, though automated security scanning provides partial compensation.
All eight workflows use read-only permissions and contain no untrusted checkout or script-injection paths, but all 20 action references are unpinned and the audit found a high-confidence unpinned container image. This is a meaningful workflow hygiene and reproducibility concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Evan Sims |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/http-client Version ^1.0 | — | — |
psr-discovery/discovery Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 6 months ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.