hyperf/metric
Its long release history and organization backing provide continuity. The complete artifact license, release notes, and repository tests are reassuring, while workflow references are all unpinned.
67%
Total Score
75
100
94
100
Health Score Breakdown
There were no commits and no active maintainers in the last 3 months, which weakens confidence in ongoing maintenance despite the recent package release.
Composer is used as the build tool, but no security scanning tool was detected; this is a modest transparency and assurance gap rather than evidence of abandonment.
Both workflows were analyzed successfully and no audit findings or dangerous untrusted checkouts were reported. However, all 2 action references are unpinned, leaving avoidable action-version drift risk; the pull_request_target trigger has no detected sink.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 hyperf/codec Version ~3.2.0 | — | — |
hyperf/engine Version ^2.3 | — | — |
hyperf/guzzle Version ~3.2.0 | — | — |
psr/container Version ^1.0 || ^2.0 | — | — |
hyperf/context Version ~3.2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.