shahariaazam/http-client-support
It has an MIT license, a clear README, tests, and a matching repository. The small dependency surface and lack of install scripts reduce exposure, but do not offset the maintenance concern.
44%
Total Score
50
100
92
67
Health Score Breakdown
A single registry maintainer is a thin publishing base for a user-owned project, increasing continuity risk if that person becomes unavailable.
The package has made only one release, on June 1, 2020, with no releases in the last 12 months. That long period without a new release is a substantial abandonment concern.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package having received no visible maintenance since June 2020.
The repository has no security policy. This is a transparency and vulnerability-reporting gap, although the package is small and otherwise easy to inspect.
The sole workflow was fully analyzed with no reported audit findings or untrusted execution paths, but both of its two action references are unpinned, leaving avoidable update and provenance risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Shaharia Azam |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 nyholm/psr7 Version ^0.2.3 | — | — |
psr/http-client Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 6 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.