he426100/hyperf-user-relation

Maintainerscaution

The registry lists one publisher account. This is a modest resilience concern for an independently owned package, but registry access data does not establish who actively maintains the code.

Project backingcaution

The registry namespace and repository owner are the same individual account, and the repository is user-owned rather than organization-backed. This provides clear ownership but little evidence of institutional maintenance capacity.

Release historycaution

The latest release was published on December 1, 2023, and there were no releases in the last 12 months despite the package being over three years old. This is a meaningful maintenance concern, though the package has four releases rather than being entirely unproven.

Repo popularitycaution

The repository has zero stars and zero forks, with one watcher. Popularity is only supporting evidence, but these counts provide little external validation or community resilience.

Repo toolingcaution

The repository uses Composer for builds, which fits the package ecosystem, but no security scanning tools are present. This is a hygiene gap rather than evidence that the package is unsafe.