hyperf-ext/hashing
The package is licensed, documented, and tested in its repository, with a matching organization-owned source. Its registry release history is stale, and workflow hygiene is imperfect because all four actions are unpinned and one uses an archived action. Pin this version only if its PHP and Hyperf dependencies fit your application.
58%
Total Score
75
92
50
Health Score Breakdown
The latest registry release was published about five years ago, with no releases in the last 12 months. This is a meaningful freshness and abandonment concern, despite the package having six releases overall.
The repository recorded zero commits and zero active maintainers in the last three months. The repository was pushed in August 2025, but that does not compensate for the absence of recent development activity.
Both workflows were analyzed successfully and have no untrusted checkouts or script injection, but all four action references are unpinned and one high-confidence medium-severity finding uses an archived action. These are maintainability and build-integrity hygiene concerns, not a severe standalone risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Eric Zhu |
| Taylor Otwell |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 hyperf/di Version ^2.1 | — | — |
hyperf/config Version ^2.1 | — | — |
hyperf/framework Version ^2.1 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.