jjj/chosen

Chosen enhances native select boxes with jQuery and Prototype adapters, plus experimental Vanilla and React editions.

Latest 4.0.0

Packagist

72%

Total Score

caution

Usable with caveats: all recent repository commits come from one contributor.

Health Score Breakdown

Project backing

The repository is owned by a GitHub user rather than an organization, so there is no shown organizational handoff capacity to offset the concentrated commit activity.

Repo bus factor

Only 1 contributor made commits in the last 3 months, with that contributor responsible for 100% of 201 commits. This creates a meaningful handoff and continuity risk for an individually owned project.

Repo tooling

The project uses Composer for builds, which is positive, but no security-scanning tools were detected. The missing scanner is a modest transparency and maintenance gap rather than evidence of abandonment.

Workflow audit

Both workflows were fully analyzed with no untrusted checkout or script-injection findings. However, all 6 action references are unpinned, the publish workflow has top-level write permissions, and a high-confidence low-severity finding reports installation outside a lockfile; these are workflow hygiene concerns, not standalone severe risks.