hyperf/websocket-server

Repo bus factorcaution

All recent commit activity came from one contributor, leaving maintenance dependent on a single active individual; organization ownership provides some capacity for handoff but does not remove the concentration concern.

Repo commit activitycaution

Only 1 commit was recorded in the last 3 months, indicating limited recent development activity despite the recent release history.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected; this is a modest transparency and hygiene gap rather than evidence of unsafe code.

Workflow auditcaution

Both workflows were analyzed successfully and no audit findings or untrusted-checkout or script-injection sinks were reported. However, both action references are unpinned, so their contents can change without a repository commit.