swoft-fork/http-server
The package includes tests, a readable README, and a matching Apache-2.0 license. Its small dependency set and lack of install-time scripts are positives, but they do not offset the weak maintenance evidence.
38%
Total Score
0
100
67
75
Health Score Breakdown
This is the package's only release, published 640 days ago, with no releases in the last 12 months. That indicates a weak maintenance track record for a production dependency.
The repository had 0 commits and 0 active maintainers in the last 3 months. Combined with the package's one-release history, this strongly suggests inactive maintenance.
Composer build tooling is present, but no security-scanning tools were detected. That weakens automated assurance for a package with no recent maintenance activity.
The linked repository is not archived, which is a positive counterweight to the inactivity evidence, although its last push was on the release date.
The repository has no security policy, so there is no documented route for reporting or coordinating security issues. This is a transparency gap, though not a severe risk on its own.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 swoft-fork/framework Version ~2.1.0 | — | — |
swoft-fork/validator Version ~2.1.0 | — | — |
swoft-fork/http-message Version ~2.1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.