friendsofhyperf/helpers

Dependency profilecaution

The package declares 9 runtime dependencies, which increases the number of transitive components involved in adoption. This is a moderate complexity concern for a small helpers package, though not severe by itself.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. This is a meaningful maintenance warning, although the recent release history shows that the project was active over the broader period.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That leaves a modest transparency and maintenance gap.

Workflow auditcaution

Both workflows were analyzed successfully with no reported audit findings, and no workflow has top-level write permissions or an untrusted checkout. However, both of the two action references are unpinned, which weakens build reproducibility.