tuupola/http-factory
The source repository includes tests, a changelog, and a matching README, while the release is MIT-licensed with only two runtime dependencies. Its workflow has no detected dangerous findings, but all four action references are unpinned.
68%
Total Score
50
100
86
50
Health Score Breakdown
The package has 14 releases since May 2017, but none in the last 12 months and the latest registry release was in September 2021, indicating substantially slowed release maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, weakening evidence of ongoing development and increasing the chance that fixes may arrive slowly.
The repository uses Make and Composer build tooling, but no security scanning tools were detected; this is a modest transparency and maintenance gap rather than a severe concern.
The single workflow was fully analyzed with no dangerous audit findings or untrusted checkouts, but all four action references are unpinned, leaving them exposed to upstream reference changes.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Mika Tuupola |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/http-factory Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.