Package Health

hyperf/single-flight-incubator

Usable with caveats: it has active Hyperf organization backing, tests, a clear license, and recent releases. However, there have been no commits or active maintainers in the last three months, and workflow permissions are not explicitly restricted.

Latest v0.4.0PackagistPackagist

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

83

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

83

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

90

Health Score Breakdown

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. A release on the assessment date and recent merged pull-request activity provide some compensation, but the absence of direct commit activity remains a maintenance warning.

Repo popularitycaution

The repository has four stars and one fork, indicating limited adoption. This is supporting evidence only and is outweighed by the organization backing, tests, and release history.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest tooling gap.

Token permissionscaution

Neither workflow declares top-level token permissions. Although no workflow requests top-level write access, the lack of explicit permissions is a preventable CI security-hygiene gap.

Version stabilitycaution

Version v0.4.0 is not a stable major release, so compatibility may still change even though it is not marked prerelease.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
hyperf/di
Version ~3.1.0
hyperf/context
Version ~3.1.0
hyperf/support
Version ~3.1.0

Weekly Downloads

Info

Last Published
8 days ago
Created
1 year ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform