42%
Total Score
50
75
50
The package has 72 releases since May 2021, but its latest release was in August 2022 and it had no releases in the last 12 months. The roughly four-year release pause is strong evidence of possible abandonment despite the earlier release cadence.
The package declares 29 runtime dependencies, including a broad Hyperf framework surface. That is plausible for this framework integration but increases compatibility and maintenance burden.
The package runs post-autoload-dump and post-root-package-install scripts. Install-time behavior deserves caution because these scripts add execution during Composer operations, although this signal alone does not establish that the package is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
hyperf/rpc Version 2.2.0 | — | — |
hyperf/amqp Version ^2.2 | — | — |
hyperf/cache Version 2.2.0 | — | — |
hyperf/redis Version ^v2.2.0 | — | — |
hyperf/config Version 2.2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.