hyperf-ext/notifications
The MIT license and repository tests provide basic transparency, while the package has no install-time scripts. Its own README says it is not for production, so choose a maintained alternative rather than adopting this release.
30%
Total Score
75
70
67
Health Score Breakdown
This is the package's only release, published about 5 years ago, with no releases in the last 12 months. That strongly suggests abandonment despite the stable version label.
The artifact includes a README and the repository has tests, but the README is only 30 characters and explicitly says the package is under development and should not be used in production.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the package's long release gap and leaving current maintenance unverified.
The linked repository has no security policy. This is a transparency gap for a package that handles notification delivery, although the license and repository tests provide some compensating evidence.
The single workflow was fully analyzed and had no untrusted checkout or script-injection path, but both action references are unpinned and one uses an archived action repository.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Eric Zhu |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 hyperf/di Version ~2.2.0 | — | — |
ramsey/uuid Version ^4.1 | — | — |
hyperf/event Version ~2.2.0 | — | — |
hyperf/config Version ~2.2.0 | — | — |
hyperf/logger Version ~2.2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.