yevheniizhabchyk/hyperf-auth

Lifecycle scriptscaution

The package runs post-install and post-update Composer scripts, adding execution during dependency operations. This is a manageable transparency and review concern rather than a severe health risk.

Project backingcaution

The repository is owned by an individual user rather than an organization. That is valid for an open-source project, but it provides less visible backing against maintainer loss than organizational ownership.

Release historycaution

This is a young package, about three months old, with only one release and no established release cadence. That limits evidence of sustained maintenance, though its short history is not abandonment by itself.

Repo commit activitycaution

There were zero commits and zero active maintainers in the past three months. For a package only about three months old, this leaves maintenance capacity uncertain and raises abandonment risk.

Repo popularitycaution

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but the absence of any visible community adoption provides no compensating maturity signal.