friendsofhyperf/command-validation

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which weakens evidence of ongoing maintenance. The recent release cadence partly offsets this, but does not remove the concern.

Repo popularitycaution

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but this provides little independent adoption signal.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The separate security policy is a compensating transparency signal, so this is a modest hygiene concern rather than a severe risk.

Workflow auditcaution

Both workflows were analyzed successfully with no audit findings, no untrusted checkout or script-injection sinks, and no top-level write permissions. However, both of the two action uses are unpinned, which leaves their resolved code mutable over time.