ctw/ctw-middleware-httpexception

Project backingcaution

The repository is owned by an individual user rather than an organization, so the single-contributor maintenance concentration is not offset by visible organizational backing.

Repo bus factorcaution

All 34 recent commits came from one contributor, so maintenance and release knowledge are concentrated in a single person. The active commit rate partly offsets this, but there is no second active contributor shown.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool is reported. The missing scanner is a modest transparency gap rather than evidence of unsafe code.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting and response expectations unclear for a middleware package.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no reported audit findings or untrusted execution sinks. However, its only action reference is unpinned, so the workflow has a modest reproducibility and action-integrity weakness.