psr-mock/http-factory-implementation
The repository includes tests, a changelog, security scanning, and a matching source tree. Its organization backing and stable 1.0.1 release help, but workflow images are unpinned and maintenance has been inactive for over two years.
62%
Total Score
75
93
Health Score Breakdown
Only two releases have been published, with none in the last 12 months; the latest release was over two years ago. This indicates limited ongoing maintenance, though the package may be intentionally stable.
The repository recorded zero commits and zero active maintainers in the last three months, with its last push over two years ago. That weakens evidence of current maintenance capacity.
All 20 analyzed action references are unpinned, and the audit found one high-confidence, high-severity unpinned container image. The workflows have no untrusted checkouts or script injection, which limits the immediate exposure, but the release automation still has avoidable supply-chain hygiene risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Evan Sims |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/http-factory Version ^1.0 | — | — |
psr/http-message Version ^1.0 | — | — |
psr-mock/http-message-implementation Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.