superbrave/verbose-error-http-client

Release historycaution

The package has six releases since 2019, but none in the last 12 months and the latest release was about two years ago. This indicates materially slowed maintenance for a dependency.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with the absence of releases in the last year. The tested 2.1.2 release provides some evidence of prior maintenance but does not offset the current inactivity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. For a maintained dependency, the missing scanning layer is a modest hygiene gap.

Security policycaution

The repository has no security policy. This reduces transparency around vulnerability reporting, though it is not evidence of a vulnerability itself.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, both action references are unpinned, leaving the build exposed to mutable action changes.