hyperf/swoole-tracker

Release historydanger

The package has 28 releases over about seven years, but it has had no release in about three years. That materially raises abandonment and compatibility risk.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, consistent with the roughly three-year release gap and indicating weak current maintenance.

Repo toolingcaution

Composer is used for the build, but no security-scanning tool is configured. This is a hygiene gap, not evidence that the package is unsafe by itself.

Version stabilitycaution

The assessed version is v3.1.0-rc.4, a prerelease, and recent releases have a 45% prerelease share. Consumers should expect less release stability than from a final version.

Workflow auditcaution

Both workflows were analyzed successfully, with no untrusted checkout or script-injection findings. However, all three action uses are unpinned and one high-confidence medium-severity finding uses an archived action, weakening workflow reproducibility and maintenance hygiene.