friendsofhyperf/model-morph-addon

Repo commit activitycaution

There were no commits or active maintainers in the last three months. The recent release history and current push partly compensate, but the lack of recent development lowers confidence in ongoing work.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. This is a modest transparency gap rather than evidence of abandonment.

Workflow auditcaution

Both workflows were analyzed successfully with no audit findings, no untrusted checkout or script-injection sinks, and no top-level write permissions. However, both action references are unpinned, leaving a minor reproducibility and supply-chain hygiene gap.