Clear licensing, documentation, and an organization-backed project add useful transparency. Recent repository commits are quiet and workflow actions are unpinned, so ongoing upkeep deserves attention.
76%
Total Score
75
89
83
No commits or active maintainers were recorded in the last 3 months. The regular release history partly offsets this, but the recent source-activity gap remains a maintenance caution.
The repository has only 2 stars and 1 fork, indicating limited public adoption. Popularity is supporting evidence rather than a decisive health measure, so this is a mild caution.
Composer is used for builds, but no security scanning tools were detected. This is a modest transparency and supply-chain hygiene gap rather than evidence of unsafe code.
Both workflows were analyzed without audit findings or untrusted checkouts, and neither grants top-level write permissions. However, all 2 analyzed action references are unpinned, leaving avoidable dependency-update risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
hyperf/di Version ~3.2.0 | — | — |
hyperf/amqp Version ~3.2.0 | — | — |
hyperf/codec Version ~3.2.0 | — | — |
hyperf/redis Version ~3.2.0 | — | — |
hyperf/config Version ~3.2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.