woodynew/hyperf-validation

Release historydanger

Only two releases were published, both in June 2023, with no releases in the last three years. This is strong evidence of an inactive release process for a library dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers over the last three months, consistent with the long period since the last release. No newer maintenance evidence compensates for this.

Repo issue activitycaution

There were no new or merged pull requests in the last month, and no issue activity was observed. The unknown open-issue count limits how much can be inferred, but the available activity still suggests low maintenance.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, although it is a secondary concern compared with the inactive project history.

Workflow auditcaution

All three action references are unpinned, and one high-confidence medium-severity finding uses an archived action. The pull_request_target trigger has no untrusted checkout or script-injection sink, so it is not independently dangerous.