hyperf/event

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, weakening evidence of ongoing development despite the recent release.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are reported, leaving a modest transparency and maintenance gap.

Workflow auditcaution

Both workflows were analyzed without reported audit findings, and the pull_request_target workflow has no untrusted checkout or script-injection sink. However, both uses are unpinned, which weakens build reproducibility.