The repository includes a full test suite, a detailed README, and matching MIT licensing. No dangerous workflow findings were reported, though the project lacks a security policy and its automation uses unpinned actions.
64%
Total Score
50
100
88
67
The repository owner is an individual rather than an organization, so the one-person contributor concentration is not offset by visible organizational backing.
The package is only 45 days old and has two releases, both published within minutes on the same day. That is limited evidence of sustained maintenance, though the recent release is not itself a concern.
One contributor made all three recent commits, giving the project a complete single-person bus factor. The matching repository and package identity help transparency but do not reduce succession risk.
There were three commits in the last three months, all recent enough to show activity but made by only one active maintainer. This is limited evidence of ongoing maintenance.
Composer build tooling is present, but no security scanning tool was detected. For a young package, this leaves a modest verification gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.0 || ^2.0 || ^3.0 | — | — |
hyperf/codec Version ~3.1.0 | — | — |
hyperf/redis Version ~3.1.0 | — | — |
hyperf/config Version ~3.1.0 | — | — |
hyperf/engine Version ^2.10 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.