hyperf/grpc

It has a stable major release line, regular registry releases, an MIT license, and organization backing. The small repository and limited security tooling reduce confidence, while workflow pinning needs attention.

Latest v3.2.0

Packagist

70%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

There were 0 commits and 0 active maintainers in the last 3 months. The recent release shows some activity, but the absence of current repository work raises a maintenance concern.

Repo popularity

The repository has only 2 stars and 3 forks, providing little community evidence or external review. Organization backing and the package's release history partly compensate, so this is supporting caution rather than a severe risk.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. The repository's security policy is a compensating transparency signal, so this is a modest gap.

Workflow audit

Both workflows were analyzed successfully with no audit findings or dangerous untrusted checkouts. However, both action references are unpinned, so workflow dependencies can change without a reviewed release.