sohris/http
The README says the package is being rebuilt, and its 0.x version plus nine runtime dependencies leave integration uncertainty. MIT licensing, matching repository details, and organizational ownership provide useful transparency, but do not offset the maintenance risk.
43%
Total Score
50
67
75
Health Score Breakdown
The package has 11 releases over roughly four and a half years, but none in the last 12 months; that prolonged release gap raises maintenance concerns.
The repository had zero commits and zero active maintainers in the last three months, reinforcing the concern suggested by the lack of recent releases.
The artifact includes a README, but it is only 230 characters and explicitly says the package is being rebuilt. Missing tests and a changelog are normal packaging practice and do not lower the score.
The repository has zero stars and forks and only one watcher, providing little supporting evidence of an active user or contributor community.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Rdanieli |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 react/http Version ^1.3.0 | — | — |
sohris/core Version ^0.5 | — | — |
react/stream Version ^1.2 | — | — |
firebase/php-jwt Version ^6.0 | — | — |
guzzlehttp/guzzle Version ^7.4 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.