friendsofhyperf/model-uid-addon

Release historydanger

The package has made no release in nearly three years: its latest release was December 25, 2023, despite 27 releases overall. Earlier regular releases show past activity but do not offset the long current gap.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last three months, consistent with the package having stopped evolving since December 2023.

Repo popularitycaution

The repository has only 2 stars, 0 forks, and 1 watcher, providing little independent evidence of active community use. Popularity is supporting evidence, so this reinforces but does not determine the maintenance concern.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a modest transparency and maintenance gap, not evidence that the release is unsafe by itself.

Workflow auditcaution

All three action references are unpinned, and the release workflow uses an archived action with high-confidence medium severity. The pull_request_target trigger has no untrusted checkout or script-injection sink, so it is not independently dangerous.