hyperf-plus/route

Repo commit activitycaution

No commits and no active maintainers were recorded in the last three months. Although a recent release shows publication activity, the lack of current source activity is a real maintenance concern.

Repo issue activitycaution

There are no open issues or pull requests and no recent issue or pull-request activity. This is compatible with a small stable project, but it provides little evidence of ongoing community maintenance.

Repo toolingcaution

Composer is used for the build, but no security-scanning tools were detected. This is a transparency and hygiene gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. The tested project and recent release partly offset this, but not the transparency gap.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings or untrusted checkout/script-injection paths, but all three action references are unpinned. The missing top-level permissions block is acceptable on its own, while unpinned actions remain a supply-chain hygiene concern.