wilkques/http-client

Release historycaution

The package has 13 releases over about 5 years, but only 1 release in the last 12 months. The release published today provides some evidence of current activity, but the recent cadence is limited.

Repo commit activitycaution

There were 0 commits and 0 active maintainers in the last 3 months. A repository push and package release today partly offsets this, but the recent development record remains thin.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That weakens automated supply-chain and vulnerability hygiene without indicating abandonment by itself.

Security policycaution

The repository has no security policy, leaving no documented channel or process for handling vulnerability reports. This is a transparency gap for a library that performs HTTP requests.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkouts, script injection, or audit findings, but all 3 action references are unpinned. Unpinned actions reduce build reproducibility and update control.