hyperf/filesystem

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last 3 months. This lowers confidence in current maintenance capacity, although the release history shows recent registry activity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That is a modest transparency and maintenance gap rather than evidence that the package is unsafe.

Workflow auditcaution

Both analyzed workflows completed the audit without findings or untrusted checkouts, and the pull_request_target trigger has no reported sink. However, both action references are unpinned, leaving a reproducibility and workflow-hygiene gap.