upscale/ext-swoole

The package is deliberately minimal and easy to audit. Clear licensing, a focused dependency profile, and an exact release note support routine use. Pin this version if its extension constraint is the intended compatibility range.

Latest v6.2.2

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. Although automated release synchronization may explain this for a tiny metapackage, the absence of recent human activity weakens maintenance evidence.

Repo tooling

Composer is used as the build tool, which fits the package, but no security scanning tools are configured. The missing scanning is a hygiene gap rather than evidence of abandonment.

Security policy

The repository has no security policy. This reduces transparency for reporting vulnerabilities, though the package contains no application code and has a very small dependency surface.

Version stability

The assessed release is a stable major version and is not a prerelease. The registry's reported latest version is older than the assessed version, so version metadata is slightly inconsistent but not enough to outweigh the release evidence.

Workflow audit

Both workflows were analyzed successfully with no untrusted checkouts, script injection, or audit findings. However, all four action references are unpinned, leaving workflow dependencies exposed to upstream changes.