Is psr/http-message safe to use?

psr/http-message has no known vulnerabilities on the latest version (2.0). DepScope rates its health at 36/100 (critical risk).

What is the latest version of psr/http-message?

The latest version of psr/http-message is 2.0, released 2023-04-04.

Does psr/http-message have known vulnerabilities?

No known vulnerabilities on the latest version of psr/http-message.

Is psr/http-message deprecated?

No, psr/http-message is actively maintained. Latest release: 2.0 (2023-04-04).

What are alternatives to psr/http-message?

DepScope has no curated alternatives for psr/http-message at this time.

What license does psr/http-message use?

psr/http-message is licensed under MIT.

psr/http-message

composerv2.0

Common interface for HTTP messages

License MITpermissive19 versions1 maintainers1 deps

php-fig/http-message

/ 100

Health

use with caution

psr/[email protected] low health (36/100) — consider alternatives

Low health score (36/100)

Health breakdown0 – 100

0/25

maintenance

0/20

popularity

25/25

security

9/15

maturity

2/15

community

Vulnerabilities

none known

OSS Scorecard

OpenSSF security posture score

3.2/10

weak

Maintainer trust

Active maintainers (3m)

1

Contributors (12m)

0

Primary author dominance

0%

GitHub stars

7,064

single active maintainer 3m

Health History

Dependency Tree

License Audit

Dependencies (1)

php

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/composer/psr/http-message

Last updated · 2023-04-04T09:54:51+00:00