sunrise/uri
It has an MIT license and includes tests, supporting basic transparency. The registry marks it abandoned and points to sunrise/http-message, so depend on the replacement instead.
12%
Total Score
38
Health Score Breakdown
The package is marked abandoned at the registry, with deprecation applying to the package and sunrise/http-message named as its replacement. This is a severe adoption risk despite the otherwise usable metadata.
The package has 34 releases since September 2018, but none in the last 12 months and its latest release was in December 2022. That prolonged inactivity reinforces the abandonment status.
The artifact includes a README and tests, but the README explicitly says the package was moved to http-message and is abandoned. The testing evidence is therefore outweighed by the package's stated lifecycle.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Anatoly Fenric |
| 李昀陞 (Peter) |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/http-factory Version ^1.0 | — | — |
psr/http-message Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.