friendsofhyperf/notification

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, a concrete maintenance gap despite the recent registry release cadence.

Repo popularitycaution

The repository has only 2 stars, 0 forks, and 2 watchers. This is limited adoption evidence, though popularity is supporting evidence rather than a standalone health verdict.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository hygiene gap.

Workflow auditcaution

Both workflows use unpinned actions (2 of 2), which weakens build reproducibility. The audit found no dangerous checkout or script-injection sink, no top-level write permissions, and no other findings.