The repository includes tests, a matching source project, an MIT license, and no install-time scripts. Its tiny README, absent security policy, and roughly four years without a release or commit make future fixes and support unlikely.
42%
Total Score
33
50
72
83
The package has had no release in about four years: five releases were published in total, with none in the last 12 months. This is strong evidence of abandonment risk despite the stable release history.
There were zero commits and zero active maintainers in the last three months, consistent with the roughly four-year release gap and materially increasing abandonment risk.
Six runtime dependencies, including PHP, Swoole, Hyperf, and Go-related components, indicate a nontrivial integration surface. The profile is understandable but creates ongoing compatibility maintenance needs for an inactive package.
The artifact has a README and the repository has tests and uses GitHub releases, which provide some consumer and maintenance support. The seven-character README is exceptionally thin, limiting practical documentation.
The repository owner is an individual user rather than an organization, so the small registry maintainer footprint is not clearly backed by a larger project team. This makes the inactive maintenance pattern more consequential.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
hyperf/pool Version ^2.0.0 | — | — |
hyperf/process Version ^2.0.0 | — | — |
spiral/goridge Version ^2.4.1 | — | — |
symfony/event-dispatcher Version ^4.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.