hyperf/testing

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months, which raises a maintenance concern despite the recent release and long release history.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Workflow auditcaution

Both workflows were fully analyzed with no reported audit findings or untrusted checkouts, but both of the two action references are unpinned, creating avoidable supply-chain hygiene risk. The pull_request_target trigger is not concerning on its own because no matching sink was found.