limingxinleo/hyperf-utils

Repo bus factorcaution

One contributor made 100% of recent commits, leaving maintenance dependent on a single visible individual; the repository is user-owned, so no organizational handoff is evidenced.

Repo commit activitycaution

Only 1 commit was recorded in the last 3 months, indicating limited recent maintenance activity despite the recent repository push.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving supply-chain hygiene less transparent.

Security policycaution

The repository has no security policy, which weakens vulnerability-reporting transparency for a reusable library.

Workflow auditcaution

Both workflows omit top-level permissions, which is acceptable on its own, but all 4 action references are unpinned and one high-confidence medium-severity finding uses an archived action. No untrusted checkout or script injection was detected.