lmz/hyperf-mongodb
The README and matching source tree make integration straightforward. The project has no recent activity or security policy, while its license declaration conflicts with the detected license.
42%
Total Score
100
75
75
Health Score Breakdown
The package has 7 releases since December 2019, but none in the last 12 months; the latest release was in October 2021, indicating prolonged inactivity.
The artifact contains an Apache-2.0 license file, but the manifest declares MIT, so the conflicting metadata creates a genuine licensing transparency concern.
Composer is used for builds, but the repository reports no security scanning tools, leaving a security-process gap for a package with no recent maintenance.
The repository has no security policy, reducing transparency about how vulnerabilities are reported and handled.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 hyperf/pool Version ~2.2.0 | — | — |
hyperf/utils Version ~2.2.0 | — | — |
hyperf/contract Version ~2.2.0 | — | — |
mongodb/mongodb Version ^1.5 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.