spryker/http

Dependency profilecaution

The package has 13 runtime dependencies and 8 development dependencies, which is a meaningful integration surface but is consistent with a broad HTTP module and not excessive on its own.

Repo popularitycaution

The repository has 0 stars and 0 forks, indicating limited public engagement; the concern is softened because release and contributor activity are strong and popularity is only supporting evidence.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected; this is a transparency and assurance gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Token permissionscaution

The single workflow does not declare top-level token permissions, so its CI permissions are less explicit than recommended; no top-level write permissions were found.