he426100/hyperf-cookie

Release historydanger

The package has only 2 releases, with the latest nearly 3 years ago and none in the last 12 months. This is strong evidence of limited ongoing maintenance.

Repo commit activitydanger

The repository recorded 0 commits and 0 active maintainers in the last 3 months, reinforcing the extended release gap and increasing abandonment risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a maintenance and oversight gap for a package with no recent activity.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.

Workflow auditcaution

The single workflow was fully analyzed and has no untrusted checkout or script-injection path, but both action references are unpinned and one high-confidence medium-severity finding uses an archived action.