chubbyphp/chubbyphp-workerman-request-handler

This is a healthy, established release with a repository that is active, correctly associated with the package, unarchived, and backed by an organization. It has a stable major version, five releases in the last 12 months, no deprecation status, a declared MIT license, repository tests, build tooling, and security scanning. The main concerns are that recent commits are concentrated in one contributor, no security policy is published, and the workflow does not declare top-level token permissions; these are meaningful governance and resilience gaps, but they do not outweigh the package's continuing release activity, repository backing, and supporting project hygiene.

Latest 2.3.4Packagist

Health Score Breakdown

Repo bus factorcaution

All 3 recent commits came from one contributor, creating a concentrated maintenance bus factor. Organization backing partially compensates because maintenance can potentially be handed off internally, but the observed contributor diversity remains limited.

Security policycaution

No repository security policy was found, reducing transparency around vulnerability reporting and response. This is a governance gap, but not evidence that the package is unsafe by itself.

Token permissionscaution

The only workflow lacks top-level token permissions, so its effective permissions are not explicitly constrained in the repository configuration. No write permissions were observed, but the missing declaration is still a workflow-hygiene concern.

View all 19 health checks

Vulnerabilities

We didn't find any vulnerabilities for this package.

Maintainers

Dominik Zogg

Direct Dependencies

Dependency	Last Release	Score
psr/log Version ^2.0|^3.0.2	—	—
psr/http-factory Version ^1.1	—	—
psr/http-message Version ^1.1|^2.0	—	—
workerman/workerman Version ^5.2.2	—	—
psr/http-server-handler Version ^1.0.2	—	—