hzx/hyperf-sms

Release historydanger

This package has only one release, v1.0.0, published about 4 years and 8 months ago, with no releases in the last 12 months. That leaves no evidence of ongoing release maintenance.

Repo commit activitydanger

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the package's long release gap and indicating substantial abandonment risk.

Repo toolingcaution

Composer is used for the build, but no security scanning tools were detected. This is a modest transparency and maintenance concern rather than a standalone severe risk.

Security policycaution

The repository has no security policy, reducing clarity about vulnerability reporting and maintenance response. This adds a hygiene concern alongside the stronger evidence of inactivity.

Workflow auditcaution

Both workflows were analyzed without dangerous triggers or untrusted checkouts, but all 4 action references are unpinned and a high-confidence medium-severity archived-action finding was reported. These weaken build reproducibility and workflow maintenance.