zerai/openswoole-runtime

Release historydanger

This is the package’s only release, published over three years ago, with no releases in the last 12 months. That is strong evidence of abandonment for a runtime component.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, consistent with the long gap since the only release. This materially increases abandonment risk.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, though it is less serious than the maintenance gap.

Version stabilitycaution

Version 0.1.0 is not a stable major release, so compatibility and maturity remain uncertain. The release notes and repository tests provide some compensating evidence but do not offset the lack of subsequent versions.

Workflow auditcaution

Both workflows were fully analyzed with no detected dangerous findings or untrusted checkouts. However, all 27 action references are unpinned, creating avoidable workflow supply-chain and reproducibility risk.