seagm-swoft/http-message

Release historycaution

This is the package's only release, published about 301 days ago, so there is little release history to demonstrate sustained maintenance. The stable version classification and repository backing provide some context but do not offset the thin history.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last three months. That is a concrete maintenance gap for a package with only one release, although it is not evidence that the project is abandoned by itself.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, partially offset by the repository's otherwise complete package structure.

Workflow auditcaution

Both workflows were analyzed successfully and have no trigger, checkout, or audit findings, but all 5 action references are unpinned. The missing top-level permissions blocks are ordinary and not concerning on their own.