goletter/hyperf-ai

Release historycaution

There are only two releases, both published on the same day, despite the package being about 314 days old. This provides little evidence of sustained maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the past three months, which raises abandonment risk for a package released only about ten months ago.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool is configured. That leaves a meaningful maintenance and review gap for a package with runtime dependencies.

Security policycaution

The linked repository has no security policy, reducing transparency for reporting and handling vulnerabilities. This is a hygiene gap rather than evidence that the package is unsafe.