ghostwriter/testify
Documentation and build hygiene are solid, with a clear license and security policy. Its early 0.x status and one-person commit history make long-term continuity uncertain.
67%
Total Score
67
86
100
Health Score Breakdown
The package and repository are owned by the same individual account rather than an organization, so there is no organizational handoff capacity to offset the concentrated contributor activity.
The package is 709 days old but has only three releases, with a median interval of about 297 days. Two releases in the last 12 months and a recent repository push partly offset the slow overall cadence.
All 81 recent commits came from one contributor, leaving maintenance highly dependent on a single person and increasing continuity risk.
Version 0.1.2 is not a stable major release, so its API and behavior may still change. It is not marked as a prerelease, which provides some counterweight.
The single workflow was fully analyzed with no audit findings and its action reference is pinned. However, it grants top-level write permissions; without untrusted triggers or sinks this is a mild hygiene concern rather than a severe risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Nathanael Esayeas |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 nikic/php-parser Version ^5.7.0 | — | — |
ghostwriter/config Version ^2.1.3 | — | — |
ghostwriter/console Version ^0.2.3 | — | — |
ghostwriter/container Version ^7.0.2 | — | — |
ghostwriter/filesystem Version ^0.2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 months ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.