Package Health

tiny-blocks/http

This is a healthy, actively maintained release with a substantial history: 42 releases over roughly 4 years, 21 releases in the last 12 months, and a stable non-prerelease version. The repository is active, unarchived, correctly associated with the package, backed by an organization, and includes tests, build tooling, Dependabot, a security policy, and generally safe workflows. The main concern is concentrated recent maintenance: all 7 commits in the last 3 months came from one contributor, although organizational backing and four merged pull requests in the last month provide some mitigation. The package is therefore a reasonable dependency, with normal single-maintainer continuity risk rather than a strong abandonment signal.

Latest 7.2.0PackagistPackagist

86%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

88

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

100

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

90

Health Score Breakdown

Repo bus factorcaution

Recent activity is fully concentrated in one contributor: one active maintainer made all 7 commits in the last 3 months. This is a genuine continuity concern, but the organization-owned repository provides some ability to hand off maintenance.

Token permissionscaution

Both workflows declare top-level permissions, including one read-only workflow; one auto-assign workflow has top-level write permissions, which is broader than ideal but is limited to a known automation workflow and is not by itself a severe health risk.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Gustavo Freze de Araujo Santos

Direct Dependencies

DependencyLast ReleaseScore
psr/http-client
Version ^1.0
psr/http-factory
Version ^1.1
psr/http-message
Version ^2.0
tiny-blocks/time
Version ^2.6
tiny-blocks/mapper
Version ^3.2

Weekly Downloads

Info

Last Published
12 days ago
Created
4 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform