openswoole/core

Repo bus factorcaution

All three-month commit activity comes from one contributor. Organization backing provides some handoff capacity, but no second active contributor is shown to reduce the immediate concentration risk.

Repo commit activitycaution

Only one commit was recorded in the last three months, from one active maintainer. The recent code activity is therefore thin and lowers confidence in sustained maintenance.

Security policycaution

The repository has no security policy. For a core asynchronous runtime library, that is a transparency and vulnerability-reporting gap not covered by the otherwise healthy release and repository signals.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous sinks or audit findings, but its one action reference is unpinned. That is a minor supply-chain hygiene weakness without evidence of an exploitable workflow path.