anhao/hyperf-gotask

Release historydanger

The package has had no releases in the last 12 months, despite being about 23 months old, and only three releases overall. This is strong evidence of stalled maintenance for a dependency with a narrow release history.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. Together with the absent recent registry releases, this indicates a substantial abandonment risk.

Repo package mentioncaution

The linked repository name does not match the package name and its README does not mention the package. That weakens confidence that the repository clearly represents this package, despite the matching owner.

Security policycaution

No security policy was found in the repository. This is a transparency gap for a package that manages a Go sidecar and inter-process communication, although it is not evidence of a security defect by itself.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout or script-injection findings, but both action references are unpinned and one high-confidence medium-severity finding uses an archived action. This creates avoidable build and supply-chain hygiene risk.