The repository includes tests, a security policy, and a clear MIT license. Recent work is concentrated in one contributor, and both workflow references are unpinned, so maintenance depth and build reproducibility remain concerns.
78%
Total Score
67
100
100
One contributor made all commits in the last 3 months, creating a thin recent contributor base; organization backing provides some capacity for handoff.
Only one commit was recorded in the last 3 months, which indicates limited recent activity, though the release history shows the project has continued shipping.
The workflows were fully analyzed with no untrusted checkout, script injection, or audit findings, but both action references are unpinned, weakening build reproducibility.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
hyperf/engine Version ^2.0 | — | — |
psr/container Version ^1.0 || ^2.0 | — | — |
hyperf/context Version ~3.2.0 | — | — |
hyperf/support Version ~3.2.0 | — | — |
hyperf/contract Version ~3.2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.