hyperf/service-governance-nacos

Package scaffoldingcaution

The artifact has no README, tests, or changelog, but the exact release has GitHub release notes linking its changes. The missing README reduces consumer guidance for this library, while the release notes partly compensate for missing changelog documentation.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a maintenance warning, though the recent release and push show that activity has not clearly stopped.

Repo issue activitycaution

There are five open issues and no issues or pull requests were closed in the last month. This suggests limited current issue throughput, but it is not by itself evidence of abandonment.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are configured. The missing scanning is a modest transparency and maintenance gap rather than a severe dependency risk.

Workflow auditcaution

Both workflows were analyzed successfully and the pull_request_target workflow has no untrusted checkout or script-injection finding. However, all three action references are unpinned and the release workflow uses an archived action, creating avoidable build-integrity and maintenance concerns.