dantleech/phpbench

Registry deprecationdanger

Packagist marks the entire package abandoned, with no meaningful replacement given. This is a substantial adoption concern, although the repository and release history show the project has continued receiving updates.

Repo bus factorcaution

All recent repository commits came from 1 contributor, giving the project a very concentrated short-term bus factor. Organization backing provides some handoff capacity but does not remove the maintenance concern.

Repo commit activitycaution

Only 1 commit was recorded in the last 3 months, indicating limited recent development activity. The recent release prevents this from proving abandonment, but it adds maintenance caution.

Security policycaution

No repository security policy was found. This limits vulnerability-reporting transparency, though it is a secondary concern for this package.

Workflow auditcaution

All 27 analyzed action references are unpinned, and the audit found a high-confidence unpinned container image plus archived actions; the low-confidence cache finding is only hygiene. No untrusted checkout or script-injection path was found, so this lowers workflow hygiene without making the release unfit on its own.