chubbyphp/chubbyphp-laminas-config

Maintainerscaution

Only one account has registry publish access. The organization-owned project provides some continuity, but the narrow publishing base still adds operational concentration risk.

Repo bus factorcaution

All two recent commits came from one contributor. Organization ownership offers some handoff capacity, but no second active contributor is shown in this period.

Repo commit activitycaution

The repository had two commits in the last three months, which is consistent with recent maintenance but represents limited activity. The recent release partly offsets, but does not remove, the thin activity signal.

Security policycaution

The repository has no published security policy. For a small library this is a modest transparency gap, but it does not by itself indicate abandonment.

Workflow auditcaution

The complete workflow audit found no untrusted checkouts or script injection, and no broad top-level write permissions. However, all four analyzed references are unpinned and three high-confidence findings report floating latest container images, weakening build reproducibility.