friendsofhyperf/http-request-lifecycle

Package scaffoldingcaution

A readable README and a GitHub release for this version support consumer documentation. Tests and a changelog are absent, but those are normal omissions from published package artifacts; the README also says the feature was merged into the official repository, reducing the case for continued standalone releases.

Release historycaution

The package has 76 releases and a regular historical cadence, but no release in nearly three years, indicating likely maintenance cessation for this package.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with the long gap since the latest release and increasing abandonment risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool is reported, leaving a modest transparency and maintenance gap.

Workflow auditcaution

The audit completed all workflows and found no untrusted checkout or script-injection paths, but all three action references are unpinned and a release workflow uses an archived action, weakening build reproducibility and maintenance hygiene.