Package Health/friendsofhyperf/config-anyway

friendsofhyperf/config-anyway

Usable with caveats: the package is licensed, documented, tested, and backed by a matching organization repository, but it has had no release or commit activity for over four years and remains a beta release. Consider it only if its older Hyperf integration is still compatible with your project.

Latest v1.0.0-beta.1

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published on August 16, 2022, with no releases in the last 12 months and only four releases overall. This indicates materially stale maintenance for a dependency.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package having been inactive for over four years. This is the strongest maintenance concern, though the repository is not archived.

Repo tooling

Composer build tooling is present, but no security scanning tool was detected. The missing scanning is a hygiene gap, not a severe risk on its own.

Token permissions

The only workflow lacks a top-level token-permissions declaration, so its permissions are less explicit than recommended. No write permissions were detected, making this a minor workflow hygiene concern.

Version stability

The assessed version is still marked beta, although it is the latest version and only 25% of recent releases were prereleases. The unfinished stability label is a modest adoption concern.