spiral/http
The organization-backed project has testing, static analysis, and a long release history. Maintenance is concentrated in one recent contributor, and both workflow action references are unpinned.
84%
Total Score
83
100
67
Health Score Breakdown
One contributor made all 8 commits in the last 3 months, giving that contributor a 100% share. Organization backing partly compensates for this concentration, but it still raises continuity risk.
The repository has no SECURITY.md policy. That is a modest transparency gap, though the available static-analysis tooling and organization ownership provide some compensating evidence.
Both workflows were analyzed without failed files, dangerous triggers, untrusted checkouts, script injection, or audit findings. All 2 action references are unpinned, which is a supply-chain hygiene caution.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Anton Titov (wolfy-j) |
| Pavel Butchnev (butschster) |
| Aleksei Gagarin (roxblnfk) |
| Maksim Smakouz (msmakouz) |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 spiral/core Version ^3.17.2 | — | — |
spiral/files Version ^3.17.2 | — | — |
spiral/streams Version ^3.17.2 | — | — |
psr/http-factory Version ^1.0 | — | — |
psr/http-message Version ^1.0|^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.