hyperf/config-center

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, which is a meaningful maintenance warning despite the recent release history.

Repo issue activitycaution

There are no open issues or pull requests and no recent issue or pull-request activity; this is not inherently unhealthy, but it offers little evidence of active community review.

Repo popularitycaution

The repository has only 1 star, 0 forks, and 2 watchers. Popularity is supporting evidence rather than a verdict, but this small footprint provides little independent adoption signal.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The repository's security policy partly compensates for this gap, though automated coverage is limited.

Workflow auditcaution

Both workflows were analyzed without audit findings, and the pull_request_target workflow has no untrusted checkout or script-injection sink. However, both referenced actions are unpinned, leaving avoidable build-integrity risk.