Package Health

wyrihaximus/qa-tooling-wrapper

Usable with caveats: the package is actively released, licensed, and backed by a current repository with substantial recent pull-request activity. It is only 38 days old, maintenance is concentrated in one contributor, and its workflows use write permissions without a security policy.

Latest 2.3.0PackagistPackagist

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

79

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Lifecycle scriptscaution

The package runs post-install and post-update Composer scripts, adding install-time behavior beyond ordinary file delivery. This warrants review before adoption, even though the package is explicitly a QA tooling wrapper.

Package scaffoldingcaution

The artifact has no README, which is a modest consumer-documentation gap, though tests and changelog files are not expected in a published tooling wrapper. The repository does contain a README according to the related repository evidence.

Release historycaution

The package is young at 38 days, but it already has 6 releases, including one within minutes of collection, with releases about every 11 days. This supports active early maintenance while leaving long-term maturity unproven.

Repo bus factorcaution

One contributor made 100% of the recent commits, creating a clear single-maintainer dependency. The individual-owned repository provides no demonstrated organizational handoff capacity to compensate for that concentration.

Repo commit activitycaution

There were 3 commits in the last 3 months, all from one active maintainer. Work is ongoing, but the low commit volume and concentration limit maintenance resilience.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Cees-Jan Kiewiet

Direct Dependencies

DependencyLast ReleaseScore
rector/rector
Version ^2.6.7
—
—
mockery/mockery
Version ^1.6.15
—
—
phpstan/phpstan
Version ^2.2.14
—
—
phpunit/phpunit
Version ^13.3.4
—
—
infection/infection
Version ^0.35.4
—
—

Weekly Downloads

Info

Last Published
9 days ago
Created
1 month ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform