swoft-fork/http-message

The package has a license, tests, a README, and no install-time scripts. Its small dependency surface and non-archived repository help, but the fork structure leaves little evidence of continued support.

Latest v2.1.0

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This release is the package's only release, published 465 days ago, with no releases in the last 12 months. That provides little evidence of an active maintenance process.

Repo commit activity

The repository had zero commits and zero active maintainers in the last 3 months. Combined with the single-release history, this materially increases abandonment risk.

Repo popularity

The linked repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these values provide no external sign of adoption or community support.

Security policy

The repository has no security policy. This weakens transparency and makes reporting and handling future security issues less clear.

Workflow audit

Both workflows were analyzed without dangerous triggers or audit findings, but all 5 action references are unpinned. That is a supply-chain hygiene gap, though no untrusted workflow path was observed.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

Dependency	Last Release	Score
psr/http-message Version ^1.0	—	—
swoft-fork/stdlib Version ~2.1.0	—	—
psr/http-server-handler Version ^1.0	—	—
psr/http-server-middleware Version ^1.0	—	—