gabrielanhaia/php-circuit-breaker

Release historycaution

The package has existed since June 2020 but has only four releases, with one release in the last 12 months. The recent v3.0.0 release is positive, but the sparse history limits confidence in ongoing maintenance.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. Although v3.0.0 was recently published, the current lack of commit activity raises a maintenance concern.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a hygiene gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy. That reduces transparency about vulnerability reporting and handling, though it does not by itself show abandonment.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all seven action references are unpinned, which weakens build reproducibility, while the lack of a top-level permissions block is acceptable on its own.