hyperf-wgy/upload

Release historydanger

The package has had no release in more than two years, after 10 releases since November 2021. This materially raises abandonment and compatibility risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long gap since the latest release. This weakens evidence of ongoing maintenance.

Repo popularitycaution

The repository has 2 stars, 0 forks, and 1 watcher, providing little supporting evidence of broad review or community maintenance. Low popularity alone does not make a small stable package unfit.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are configured. That is a modest maintenance and review gap, not evidence that the release is unsafe by itself.

Security policycaution

The linked repository has no security policy, leaving vulnerability reporting and response expectations unclear. This is a transparency gap for a package that handles file uploads.