The package has had no release or repository commit activity since January 2024, and its small project shows no recent issue or pull-request movement. It does include tests, a matching license, and a clear README, but those strengths do not offset the prolonged inactivity.
42%
Total Score
25
79
Only one release exists, published in January 2024, with no releases in the last 12 months. This long release gap materially raises abandonment risk.
The repository recorded zero commits and zero active maintainers over the last three months, consistent with the prolonged release gap.
There were no new or closed issues and no pull-request activity in the last month. This provides no evidence of ongoing maintenance, although the open-issue count is unknown.
The repository uses Composer build tooling, but no security scanning tools were detected. This is a transparency and hygiene gap, not evidence of a severe defect on its own.
The workflow audit completed without high- or medium-severity findings and found no untrusted checkout or script injection. However, both analyzed action references are unpinned, leaving a modest workflow hygiene concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
hyperf/cache Version ^3.1 | — | — |
hyperf/redis Version ^3.1 | — | — |
hyperf/utils Version ^3.1 | — | — |
casbin/casbin Version ^3.20 | — | — |
hyperf/config Version ^3.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.