hyperf/async-queue

Repo bus factorcaution

One contributor made all two recent commits, concentrating current maintenance activity in a single person. Organization ownership provides some handoff capacity but does not remove the present concentration.

Repo commit activitycaution

Only two commits were recorded in the last three months, indicating limited recent development despite the recent release.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected. This is a transparency and hygiene gap rather than evidence of abandonment.

Workflow auditcaution

Both analyzed workflows completed audit coverage and have no reported findings, and the pull_request_target workflow has no untrusted checkout or script-injection sink. However, both of the two action references are unpinned, weakening build reproducibility and supply-chain protection.