Package Health

sonsofphp/http-factory

The organization-backed repository is unarchived, licensed, and has tests, with no install-time scripts. Its small dependency set and security policy help, but this release is no longer current.

Latest v0.3.10PackagistPackagist

62%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

79

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

100

Health Score Breakdown

Release historycaution

Only two releases were published, with the latest nearly two years ago and none in the last 12 months; this is a meaningful maintenance concern.

Repo commit activitycaution

There were no commits or active maintainers in the last three months, which weakens confidence that this release line is actively maintained.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected; the separate security policy provides partial compensation.

Version stabilitycaution

The release is not a prerelease, but it remains on an unstable 0.x major version, which limits maturity confidence.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Joshua Estes

Direct Dependencies

DependencyLast ReleaseScore
psr/http-factory
Version ^1.0
sonsofphp/http-message
Version ^0.3.x-dev

Weekly Downloads

Info

Last Published
1 year ago
Created
2 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform