sigmie/http
A small project footprint and no published security policy increase uncertainty, while its stable MIT-licensed package remains straightforward to inspect. Pin sigmie/http v1.0.1 and confirm ownership before relying on it long term.
58%
Total Score
75
83
75
Health Score Breakdown
The package has 64 releases and a fast historical median interval of about 7 days, but it has had no release in the last 12 months and its latest release was in December 2023. The strong earlier cadence partly offsets the prolonged current gap.
There were zero commits and zero active maintainers in the last 3 months. Combined with the old last push, this indicates current maintenance has stopped or is dormant.
The repository has 0 stars and 0 forks, with 1 watcher. Popularity is only supporting evidence, but this very small footprint provides little external validation or resilience.
Composer build tooling is present, but no security-scanning tooling was detected. The missing scanning coverage is a modest transparency and maintenance gap.
The repository has no security policy. For an HTTP client handling remote API interactions, this leaves vulnerability-reporting expectations unclear.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Nico Orfi |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 guzzlehttp/psr7 Version ^2.4 | — | — |
elastic/transport Version ^8.5 | — | — |
guzzlehttp/guzzle Version ^7.2 | — | — |
adbario/php-dot-notation Version ^2.2 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.