psr-discovery/http-factory-implementations

Release historycaution

The package has made no release in over a year, despite a previously regular median interval of about five months. This suggests slowing maintenance and lowers confidence in ongoing support.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The recent release provides some evidence of maintenance, but current activity is still absent.

Security policycaution

No security policy was found, leaving vulnerability reporting and response expectations undocumented. Repository security scanning partly compensates by showing active security tooling, so this is a transparency gap rather than a severe risk.

Workflow auditcaution

All 20 analyzed action references are unpinned, and the audit found a high-confidence unpinned container image. Read-only permissions across all workflows reduce exposure, but mutable build inputs remain a supply-chain hygiene concern.