chubbyphp/chubbyphp-api

Repo bus factorcaution

All two recent commits came from one contributor, creating a low individual bus factor. The organization-owned repository provides some handoff potential, but no second active contributor is shown.

Repo commit activitycaution

Only two commits were made in the last three months by one active maintainer. Recent release and push activity show the project is not abandoned, but the low maintenance volume warrants caution about responsiveness and continuity.

Repo popularitycaution

The repository has zero stars, forks, and watchers, indicating limited visible adoption. Popularity is supporting evidence only, so this lowers confidence modestly but is not decisive against a young, actively released package.

Security policycaution

No security policy is present in the repository. This is a transparency and vulnerability-reporting gap, although it is not by itself evidence that the package is unsafe to depend on.

Token permissionscaution

The CI workflow does not declare top-level token permissions, so its GitHub Actions permission scope is less explicit than recommended. No top-level write permissions were observed, limiting the severity of this hygiene gap.