chubbyphp/chubbyphp-deserialization

Registry deprecationdanger

Packagist marks the entire package as abandoned and names chubbyphp/chubbyphp-parsing as its replacement. This directly indicates that new dependencies should not be taken on this package.

Release historydanger

The package has 104 releases and a historically frequent median interval of about 7 days, but it has had no release in roughly 1 year and 9 months. The long recent pause reinforces the abandonment signal.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last 3 months. This is consistent with the archived status and leaves no current maintenance capacity visible.

Repository archiveddanger

The linked repository is archived, despite being pushed in March 2025, so normal maintenance and issue handling should not be expected.

Workflow auditcaution

All four analyzed action references are unpinned, and the audit found three high-confidence uses of floating latest container images. The workflow has no untrusted checkout or script-injection findings, which limits the concern to build reproducibility and hygiene.