gokure/hyperf-tinker

Project backingcaution

The registry namespace and repository owner match, and the repository is owned by a user rather than an organization; this is consistent ownership evidence but offers limited backing capacity.

Release historycaution

The package has existed for about 5 years 8 months with 9 releases, but only 1 release in the last 12 months and a median interval of about 128 days indicate a modest cadence.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months. The same-period release and recent repository push provide some compensation, but ongoing development activity is still thin.

Security policycaution

No SECURITY policy is present, leaving vulnerability reporting and response expectations less transparent.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous sinks or audit findings, but both of its 2 action references are unpinned, leaving them exposed to upstream reference changes.