hyperf/amqp

Dangerous workflowscaution

One of the two workflows uses pull_request_target, which can require careful handling of untrusted pull-request input. No untrusted checkout or script injection was detected, limiting the concern to workflow design risk.

Dependency profilecaution

The package declares 16 runtime dependencies, including several Hyperf components and php-amqplib. This is a relatively broad dependency surface that increases upgrade and compatibility exposure, though it is consistent with a framework integration library.

Package scaffoldingcaution

The artifact has no README, which weakens consumer documentation, but the repository has tests and the package is an established library with a substantial source tree. Missing tests and changelog files in the published artifact are normal packaging practice.

Repo commit activitycaution

There were 0 commits and 0 active maintainers in the last 3 months. Recent releases and a non-archived organization repository provide some compensation, but the current lack of observed development raises abandonment risk.

Repo issue activitycaution

The repository has 4 open issues but no new or closed issues and no pull requests during the last month. This is a mild sign of limited current maintenance, offset by the recent release history.