youduphp/hyperf-youdu

Release historycaution

The package has seven releases over about four years, but none in the last 12 months and the latest release was in March 2024. This indicates stalled maintenance for a dependency released as v2.0.0.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The repository was pushed in September 2024, so this is stronger evidence of inactivity than a brief pause, though it does not prove abandonment.

Security policycaution

The repository has no published security policy. This weakens vulnerability-reporting transparency, although it is a process gap rather than evidence that the release is unsafe.

Workflow auditcaution

Both workflows were fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but all four action references are unpinned. The absence of a top-level permissions block is acceptable here; the unpinned actions remain a supply-chain hygiene weakness.