The repository lacks tests, a security policy, and security scanning, which limits confidence for a library handling HTTP requests. MIT licensing, a matching organization-backed repository, and a coherent source tree provide useful transparency.
58%
Total Score
75
86
50
The package has made only one release, on November 26, 2023, and none in nearly three years; this is a meaningful maintenance concern for a library dependency.
The repository recorded no commits and no active maintainers in the last three months, indicating limited recent development activity despite a push in July 2025.
Composer is used for builds, but no security-scanning tool is configured, leaving a useful repository hygiene check absent.
The repository has no security policy, reducing transparency for reporting vulnerabilities in an HTTP client library.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
react/http Version >=1.6 | — | — |
react/async Version ^4 || ^3 || ^2 | — | — |
react/promise Version >=2.10.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.