hyperf/engine-contract
MIT licensing, a tiny runtime dependency set, repository tests, and organization backing support straightforward adoption. The package is stable and not deprecated.
68%
Total Score
75
100
88
100
Health Score Breakdown
The package has 27 releases since March 2022, but only one release in the last 12 months; the latest release was about 10 months ago. This suggests slowed maintenance without showing abandonment.
There were no commits and no active maintainers in the last three months. The recent release partly offsets this, but the current maintenance activity is weak.
The repository uses Composer for builds, but no security scanning tools were detected. The missing scanning is a modest transparency and hygiene gap.
Both workflows were analyzed successfully with no untrusted checkout or script-injection findings, but all four action references are unpinned and one high-confidence medium-severity finding uses an archived action. These are workflow supply-chain hygiene concerns.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 10 months ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.