The package has clear licensing, useful documentation, and an organization-backed repository with a defined security policy. Its stable release history and recent release notes provide some reassurance despite limited recent development activity.
72%
Total Score
75
100
100
83
The repository recorded no commits and no active maintainers in the last three months. Although the latest release was recent, this leaves limited evidence of ongoing development between releases.
Both workflows were analyzed without audit failures or dangerous sinks, and neither grants top-level write permissions. However, both of the two analyzed action uses are unpinned, leaving their referenced action code subject to change.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
hyperf/di Version ~3.2.0 | — | — |
hyperf/event Version ~3.2.0 | — | — |
hyperf/context Version ~3.2.0 | — | — |
hyperf/contract Version ~3.2.0 | — | — |
hyperf/tappable Version ~3.2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.