dleno/hyperf-env-multi

Project backingcaution

The repository is owned by an individual account rather than an organization, so there is no visible organizational backing to compensate for the limited maintenance activity.

Release historycaution

The package has existed for about 5 years but only has 3 releases, with a median interval of about 2 years and 5 months. Two releases in the last 12 months partly offset the otherwise sparse history.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The recent push and release provide some counterevidence, but ongoing maintenance capacity remains uncertain.

Security policycaution

The repository has no security policy. This is a transparency and reporting gap, though the package's small scope and available security scanning reduce its weight.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted triggers, script injections, or audit findings. Its top-level write permission is broader than necessary, but no untrusted path reaches it, so this is only a mild hygiene concern.