friendsofhyperf/components
Clear documentation, tests, licensing, and security tooling make integration straightforward. The workflow audit still finds widespread unpinned actions and high-confidence template-injection patterns, so release automation deserves review.
82%
Total Score
100
50
100
83
Health Score Breakdown
The package declares 26 runtime dependencies and 73 development dependencies, making it a broad component collection with meaningful dependency complexity rather than a minimal library.
All nine workflows were analyzed with no untrusted checkouts or script-injection findings, but 28 of 31 action references are unpinned. The audit also reports high-confidence template-injection findings in release and split workflows; these are hygiene concerns because no dangerous trigger or sink was identified.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Deeka Wong |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psy/psysh Version ^0.11.0 || ^0.12.0 | — | — |
ramsey/uuid Version ^4.7 | — | — |
symfony/uid Version ^6.0 || ^7.0 | — | — |
nesbot/carbon Version ^2.0 || ^3.0 | — | — |
sentry/sentry Version ^4.28.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.