chaos-php/chaos-monkey

Maintainerscaution

Only one registry account has publish access, which is a limited publishing base. The organization-owned repository provides some backing, so this is a mild concern rather than a severe risk.

Release historycaution

The package has only 3 releases since January 2021, with none in the last 12 months and the latest release over 2 years ago. This is a meaningful maintenance concern despite the package not being deprecated.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap and increasing abandonment risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That reduces supply-chain transparency and repository hygiene.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous findings or broad token permissions, but all 3 action references are unpinned. This leaves avoidable workflow reproducibility and update risk.