hyperf/rpc

Dangerous workflowscaution

One of two workflows uses pull_request_target, which can be risky when handling untrusted pull requests; no untrusted checkout or script-injection pattern was detected to offset that concern.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months. This is a meaningful maintenance concern, even though a release and repository push occurred on June 7, 2026.

Repo popularitycaution

The repository has 0 stars and 0 forks, with only 2 watchers. Popularity is not decisive, but these counters provide little independent evidence of broad adoption or review.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving automated security hygiene less visible.

Token permissionscaution

Neither workflow declares top-level token permissions. Although no workflow declares top-level write access, missing explicit permissions reduces clarity and least-privilege assurance.