fewedev/php-bin

Release historycaution

This package was released only once, on the assessment date, with no established release cadence. That leaves maintenance and stability largely unproven.

Repo bus factorcaution

All recent commits came from one contributor, creating a meaningful single-maintainer continuity risk. Organization backing provides some compensation, but no second active contributor is shown.

Repo commit activitycaution

Only two commits were recorded in the last three months, with one active maintainer. Recent activity exists, but the low volume provides limited evidence of sustained maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a transparency gap for a package distributing executable binaries.

Token permissionscaution

Both workflows declare top-level write permissions. Although no dangerous workflow behavior was detected, broad write access increases the potential impact of a compromised workflow.