hyperf/swow-skeleton

Release historydanger

The package has made no releases in the last 12 months, and its latest release was over two years ago despite a 68-day median interval historically. This is a substantial abandonment concern for a framework dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old latest release, this materially raises the risk that problems will not be addressed.

Lifecycle scriptscaution

The package runs post-autoload-dump and post-root-package-install scripts. Install-time scripts deserve extra review because they execute during dependency setup, although this signal alone does not show that they are unsafe or poorly maintained.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, while six issues and two pull requests remain open. This reinforces the evidence of a currently quiet project.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a transparency and maintenance gap, though it is less severe because a security policy exists and the package has an established test setup.