friendsofhyperf/icomet

Release historycaution

The package has had no release in more than two years and none in the last 12 months, despite a history of 17 releases; this materially raises abandonment risk.

Repo commit activitycaution

There were no commits or active maintainers in the last three months, consistent with the long release gap and indicating currently inactive development.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected; this is a modest transparency and hygiene gap rather than evidence of unsafe code.

Workflow auditcaution

The audit covered both workflows without failures and found no untrusted checkout or script injection, but all four action references are unpinned and one uses an archived action; these are workflow hygiene risks.