Package Health/zhuchunshu/hyperf-hashing

zhuchunshu/hyperf-hashing

The package includes a README, repository tests, a stable release, and no install-time scripts. Maintenance stopped after July 2023, while the workflow uses two unpinned actions and one archived action, leaving meaningful upkeep concerns.

Latest v3.0.1

Packagist

58%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has four releases since July 2021, but none in the last 12 months and the latest release was July 31, 2023. This indicates a long period without maintenance for a security-relevant hashing component.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no release in more than two years. No provided signal shows current maintenance activity to offset this.

Security policy

The repository has no security policy, which reduces transparency for reporting vulnerabilities in a package handling password hashing. The package's README and release notes provide some documentation but do not replace a reporting channel.

Workflow audit

The single analyzed workflow is complete and has no untrusted checkouts or script injection, but both action references are unpinned and one high-confidence medium-severity finding identifies an archived action. These are workflow supply-chain hygiene concerns, not an immediate dependency verdict.