Package Health/chubbyphp/chubbyphp-http-exception

chubbyphp/chubbyphp-http-exception

This is a healthy, small PHP library with a stable 1.3.4 release, nine releases since 2022, five releases in the last 12 months, no registry deprecation, an active non-archived repository, minimal runtime dependencies, and clear MIT licensing. The source repository contains tests, CI, static-analysis and security tooling, and the package has no install-time lifecycle scripts or dangerous workflow patterns. The main concerns are that recent activity consists of only one commit from a single contributor, the repository has no security policy, and its workflow does not declare top-level token permissions; these are meaningful transparency and continuity gaps, though organization backing and recent releases partially reduce abandonment risk.

Latest 1.3.4

Packagist

82%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo bus factor

All recent commits came from one contributor, creating a concentrated maintenance dependency; organization ownership provides some handoff capacity but does not eliminate the observed concentration.

Repo commit activity

Only one commit was recorded in the last 3 months, indicating limited recent development activity; the concern is partly offset by five releases in the last 12 months and a recent repository push.

Repo popularity

The repository has zero stars and forks and only one watcher, so external adoption and community visibility are limited; this is supporting caution rather than a decisive health failure for a small library.

Security policy

The repository has no security policy, leaving vulnerability-reporting expectations and response procedures undocumented.

Token permissions

The CI workflow has no top-level token-permissions declaration. No write permissions were observed, but the absence of an explicit least-privilege declaration is a workflow-hygiene gap.