The component is small, documented, and straightforward to integrate. Recent releases are reassuring, but the quiet repository and unpinned workflow actions warrant extra care.
70%
Total Score
75
100
89
75
There were no commits and no active maintainers in the last 3 months, which weakens evidence of ongoing maintenance despite the recent release history.
The repository has only 2 stars and 1 fork; this is limited supporting evidence of community adoption, but it is not a health verdict for a small component.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.
Both workflows were analyzed successfully with no audit findings or untrusted checkout and script-injection sinks. However, both action references are unpinned, leaving avoidable workflow supply-chain exposure.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
hyperf/context Version ~3.2.0 | — | — |
hyperf/tappable Version ~3.2.0 | — | — |
hyperf/exception-handler Version ~3.2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.