AliYun Core For Hyperf
55%
Total Score
caution
Usable with caveats: no releases or repository commits since April 2024.
One registry publishing account is present, which is a thin operational base for a user-owned project. This is a modest support risk rather than a severe concern by itself.
The package has only two releases, both from April 2024, and none in the following 2 years and 5 months. This is strong evidence of limited ongoing maintenance, though it does not prove the code is unusable.
The repository recorded zero commits and zero active maintainers in the last 3 months, reinforcing the long release gap and increasing the risk that fixes may not arrive promptly.
The repository has no security policy, so there is no documented channel or process for reporting and handling vulnerabilities. The package's clear license and source repository provide some transparency but do not replace that process.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
hyperf/guzzle Version 3.0.* | — | — |
hyperf/server Version 3.0.* | — | — |
psr/container Version ^1.0|^2.0 | — | — |
hyperf/contract Version 3.0.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.