hyperf/nsq

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Recent releases and the latest push partly compensate, but the current lack of development activity is a maintenance concern.

Repo issue activitycaution

Only three issues are open and there were no new or closed issues or pull requests in the last month. This is quiet rather than alarming, but it provides little evidence of active community maintenance.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools are configured. That is a transparency and hygiene gap, not evidence that the package is unsafe.

Workflow auditcaution

Both workflows were analyzed without audit failures, and the pull_request_target workflow has no untrusted checkout or script-injection finding. However, both workflows use unpinned action references, which weakens build reproducibility and action supply-chain hygiene.