codewithkyrian/chromadb-php

Release historycaution

The package has six releases over about 993 days, with one release in the last 12 months and a median interval of about 104 days. This shows an established but relatively slow release cadence.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. Although the repository was recently pushed and a release exists, this is a meaningful maintenance warning.

Repo toolingcaution

Composer is used for the build, but no security scanning tools were detected. This is a transparency and maintenance gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy, so its process for receiving and disclosing vulnerabilities is unclear.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings or untrusted execution paths, but all three action references are unpinned. The absence of a top-level permissions block is acceptable here and does not offset the pinning gap.