vanilla/garden-http

Release historycaution

The project has existed since May 2015 with 28 releases, but it has made no release in the past 12 months; the latest release was in June 2025. This weakens current-maintenance confidence despite a long release history.

Repo commit activitycaution

There were zero commits and zero active maintainers in the past three months. Combined with no registry release in the past year, this is a meaningful sign of slowed maintenance.

Repo toolingcaution

The repository uses Composer, but no security-scanning tools were detected. This is a modest transparency and maintenance-hygiene gap, not evidence that the package is unsafe.

Security policycaution

The repository has no security policy. For an HTTP client library, that leaves vulnerability-reporting expectations less clear and modestly lowers transparency.

Workflow auditcaution

The only workflow was fully analyzed, uses read-only permissions, and has no detected high-confidence findings or untrusted execution paths. However, both action references are unpinned, leaving avoidable build-reproducibility risk.