phalcon/bridge-swoole

Release historycaution

The package has only 2 releases across about 3.5 years, with a median interval of roughly 3.4 years, although one release arrived in the last 12 months. This shows limited release maturity rather than abandonment.

Repo bus factorcaution

One contributor made 100% of the 2 recent commits. Organization ownership provides some handoff capacity, but no second active contributor is visible in this period.

Repo commit activitycaution

Only 2 commits were recorded in the last 3 months, so ongoing maintenance activity is light. The recent release provides some counterevidence, but the observed commit pace remains limited.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. For a small bridge this is a modest transparency gap, not evidence of unsafe behavior.

Workflow auditcaution

The single workflow was fully analyzed with no injection or high-confidence audit findings, and it has no top-level write permissions. However, all 4 action references are unpinned, which is a workflow reproducibility and supply-chain hygiene weakness.