webclient/fake-http-client
It has a clear README, MIT licensing, tests in the repository, and Composer/Psalm tooling. Its very small community footprint and stale release workflow make future support less certain; pin this version if adopting it.
54%
Total Score
75
86
Health Score Breakdown
The package has made no release in nearly four years, with zero releases in the last 12 months. Its earlier six-release history shows it was once active, but does not offset the current inactivity.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with an extended maintenance pause.
The repository has only 2 stars, 1 fork, and 1 watcher, providing little evidence of a broad support community. Popularity is supporting evidence rather than a verdict, so this modestly increases adoption risk.
All four analyzed action references are unpinned, and a high-confidence medium-severity finding identifies an archived action in the release workflow. No untrusted checkouts or script injection were found, limiting this to a hygiene concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Ivan Dudarev |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/http-client Version ^1.0 | — | — |
psr/http-factory Version ^1.0 | — | — |
psr/http-message Version ^1.0 | — | — |
psr/http-server-handler Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.