gRPC server for PHP: serve gRPC services from RoadRunner PHP workers
78%
Total Score
healthy
Recent releases and strong project hygiene outweigh unpinned workflows and unclear package-to-repository naming.
No commits and no active maintainers were recorded in the last three months, which conflicts with the same-period merged pull requests and the release-date push; this weakens confidence in the activity snapshot.
The repository name does not match the package and its README does not explicitly mention the registry name spiral/roadrunner-grpc; although the release notes describe a rename to roadrunner/grpc, this still leaves package ownership less transparent.
All six workflows were analyzed with no dangerous audit findings or untrusted checkouts, but all 10 action references are unpinned and one workflow grants top-level write access, creating a workflow hygiene caution.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
google/protobuf Version ^3.7 || ^4.0 || ^5.0 | — | — |
roadrunner/worker Version ^3.8 | — | — |
spiral/roadrunner Version ^3.0 | — | — |
roadrunner/goridge Version ^4.5 | — | — |
google/common-protos Version ^3.1|^4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.