Package Health

simplon/request

Risky to adopt: the package has not released since December 2015 and its repository has seen no push since August 2017. It is not deprecated or archived and has a minimal dependency footprint, but the long inactivity and weak repository linkage make abandonment and ownership concerns significant.

Latest 1.1.0PackagistPackagist

40%

Total Score

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

63

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Release historydanger

The latest release was published in December 2015, with no releases in the last 12 months despite the package being about 12 years old. This is strong evidence of abandonment risk for a library dependency.

Package scaffoldingcaution

The artifact includes a README, but it is only 433 characters and contains an ASCII logo rather than useful integration guidance. The absence of tests and a changelog in the published artifact is normal packaging practice and is not counted against it.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package. A name mismatch can be normal for subpackages, but the absence of any README reference leaves ownership and packaging provenance unclear.

Repo popularitycaution

The repository has only 4 stars, 3 forks, and no watchers, providing little evidence of community review or ongoing adoption. Low popularity alone is not disqualifying, but it offers no meaningful compensation for the inactivity.

Repository archivedcaution

The repository is not archived, which is a positive status, but its last push was in August 2017 and does not compensate for the package's long release inactivity.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Tino Ehrich

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
10 years ago
Created
11 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform