Usable with caveats: the package is licensed, documented, tested in its repository, and not deprecated or archived. However, it has had no release in about 20 months and no commits or active maintainers in the last three months, with limited adoption and modest repository security hygiene.
62%
Total Score
33
100
78
75
The repository recorded zero commits and zero active maintainers in the last three months, materially increasing abandonment risk despite the repository remaining available.
The repository is owned by an individual rather than an organization, so there is no observed organizational backing to compensate for the thin maintenance activity.
The package has eight releases since April 2024, but the latest release was in January 2025 and there were no releases in the last 12 months, indicating stalled delivery for a maintained dependency.
There is one open issue and no issue or pull-request activity in the last month, offering no sign of active community maintenance.
The repository has only 3 stars, 0 forks, and 1 watcher. Low popularity is supporting evidence rather than a verdict, but it provides little evidence of broad community review or support.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
hyperf/di Version ~3.1.0 | — | — |
hyperf/cache Version ~3.1.0 | — | — |
hyperf/event Version ~3.1.0 | — | — |
hyperf/framework Version ~3.1.0 | — | — |
hyperf/validation Version ^3.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.