phpnexus/cwh

The repository is not archived and includes tests, a substantial README, and release notes for this version. Maintenance has slowed, with no commits in the last three months, while all three workflow actions are unpinned and no security policy is present.

Latest v3.2.0

Packagist

65%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 32 releases over more than three years and one release in the last 12 months; the latest release was published about seven months before collection. This shows ongoing availability but a slower recent cadence.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. Even with a push about five months earlier, this indicates limited current maintenance activity.

Repo tooling

Composer build tooling is present, but no security-scanning tools were detected. The missing scanning is a modest repository-hygiene gap rather than evidence that the package is unsafe.

Security policy

The repository has no security policy. This reduces transparency about vulnerability reporting and handling, though the package's tests, license, and active repository status provide some compensating evidence.

Workflow audit

The single workflow was fully analyzed with no untrusted checkouts, script injection, or high-severity findings. However, all three action references are unpinned, leaving build inputs less reproducible and increasing dependency-hygiene risk.