The project has a long history, stable releases, a matching repository, and repository tests. Workflow permissions are read-only, but action references are unpinned and no security policy is published.
68%
Total Score
75
100
100
67
The repository recorded zero commits and zero active maintainers in the last three months. The recent release partly offsets this, but the lack of current development activity raises maintenance risk.
The repository has no published security policy. This is a transparency gap for a maintained library, though it does not by itself indicate that the package is unsafe.
The single workflow was fully analyzed, uses read-only permissions, and has no detected high- or medium-confidence findings. However, both of its action references are unpinned, leaving a meaningful supply-chain hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
10quality/wpmvc-mvc Version 2.1.* | — | — |
10quality/wpmvc-logger Version 2.0.* | — | — |
10quality/wpmvc-phpfastcache Version 4.0.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.