ctw/ctw-qa
The package has strong release activity and a complete, tested artifact. Its proprietary license, one-person maintenance base, absent security policy, and unpinned workflow action leave meaningful dependency risks.
72%
Total Score
67
100
92
75
Health Score Breakdown
The manifest declares a proprietary license and no license file is present, which creates a material legal constraint for developers seeking an open-source dependency.
The repository is owned by an individual rather than an organization, so the concentrated contributor activity is not compensated by visible organizational handoff capacity.
One contributor made all 50 recent commits, leaving a clear single-maintainer continuity risk without organizational backing.
The repository has no security policy, reducing transparency about vulnerability reporting and response procedures.
The workflow audit completed cleanly and uses read-only permissions, but its single action reference is unpinned, leaving avoidable build reproducibility and action-substitution risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 rector/rector Version ^2.6.0 | — | — |
phpstan/phpstan Version ^2.0 | — | — |
phpstan/phpstan-phpunit Version ^2.0 | — | — |
phpstan/extension-installer Version ^1.4 | — | — |
phpstan/phpstan-strict-rules Version ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 24 days ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.