64%
Total Score
caution
Usable with caveats: one-maintainer activity and missing license/readme limit confidence.
Neither the package nor the linked repository provides a declared or detected license, leaving the legal terms for reuse unclear.
The artifact has no README, which is a transparency and integration gap for a library, while the absence of tests and a changelog in the published artifact is normal packaging practice.
The repository is owned by an individual account rather than an organization, so the single-contributor concentration represents a meaningful continuity risk.
All 3 recent commits came from one contributor, so maintenance depends heavily on a single person and has limited handoff resilience.
Composer is used for builds, but no security scanning tool is reported, leaving security-maintenance coverage limited.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
hyperf/config Version ^3.1 | — | — |
hyperf/engine Version ^2.15 | — | — |
hyperf/watcher Version ^3.1 | — | — |
hyperf/contract Version ^3.1 | — | — |
verdient/hyperf3-di Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.