pivotphp/reactphp

Release historycaution

Only two releases exist, both about 14 months ago, with no release in the last 12 months. The repository was updated recently, which partly offsets but does not remove the registry-cadence concern.

Repo commit activitycaution

Two commits from two active maintainers in the last three months show some current maintenance, but the activity is light relative to the long gap between registry releases.

Repo popularitycaution

The repository has zero stars, forks, and watchers, providing no community-validation signal. This is weak supporting evidence only and does not outweigh the documented tests and active contributors.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. That is a modest supply-chain hygiene gap rather than evidence of unsafe code.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear for a runtime integration package.