tyhpdef/psr-http-message

Release historycaution

This package is brand new: it has one release, published within the last day, and no established release cadence. That limits evidence of maintenance maturity, though it is not abandonment by itself.

Repo commit activitycaution

No commits and no active maintainers were recorded during the last three months. Because the repository was created within the last day, this is mainly a lack of history rather than evidence of collapse.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a modest transparency and hygiene gap, not a severe dependency risk on its own.

Security policycaution

The repository has no security policy. For a small type-definition metapackage this is a minor process gap, but it leaves vulnerability reporting expectations undocumented.