friendsofhyperf/once
The package is small and focused, with a clear README, MIT licensing, and organization backing. Maintenance appears dormant since December 2023, while release automation uses three unpinned actions and one archived action.
55%
Total Score
75
86
83
Health Score Breakdown
The package has 26 releases since March 2022, but none in the last 12 months and its latest release was in December 2023, indicating prolonged inactivity.
The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap and raising maintenance risk.
The repository has only 3 stars, 0 forks, and 1 watcher, so there is limited visible community support if maintenance is needed.
All three analyzed action references are unpinned, and the release workflow uses an archived action with high-confidence medium severity. The pull_request_target trigger has no untrusted checkout or script-injection sink, so it is not independently dangerous.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 huangdijia |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 hyperf/di Version ~3.1.0 | — | — |
spatie/once Version ^3.0 | — | — |
hyperf/tappable Version ~3.1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.