switon/http

Release historycaution

This package is about three and a half months old and has only one release, so there is little evidence of sustained maintenance or release discipline.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which is a meaningful maintenance warning for a newly released framework component.

Repo popularitycaution

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but this provides no external adoption signal to offset the limited activity history.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving an important quality-control gap for a package handling HTTP requests and responses.

Workflow auditcaution

All four analyzed action references are unpinned, which weakens build reproducibility. The workflow has no dangerous trigger, untrusted checkout, script injection, or top-level write permission, so this is a hygiene concern rather than a severe workflow risk.