A complete README, MIT licensing, repository tests, and no install-time scripts make the package easier to assess and adopt. The workflow uses an archived action and leaves both action references unpinned, adding avoidable maintenance risk.
42%
Total Score
0
86
75
The package has had no releases in the last 12 months, and its latest release was about three years ago. Seven releases in total show an initial release history, but not current maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release gap and indicating a strong abandonment risk.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, though it is less significant than the prolonged lack of maintenance.
The complete workflow audit found one high-confidence medium-severity archived action and both action references are unpinned. There are no untrusted checkouts or script-injection findings, but the workflow still has avoidable supply-chain hygiene weaknesses.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
hyperf/di Version ~3.0.0 | — | — |
hyperf/event Version ~3.0.0 | — | — |
hyperf/config Version ~3.0.0 | — | — |
hyperf/command Version ~3.0.0 | — | — |
hyperf/framework Version ~3.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.