21stdigital/bedrock

The package has clear MIT licensing, useful documentation, and a source repository that matches its name. Its registry deprecation, archived repository, and lack of releases since April 2018 make this release a poor dependency choice.

Latest 1.8.9

Packagist

18%

Total Score

Maintainer Stability

Maturity

Supply Chain

Using this package? Scan for Free

Health Score Breakdown

Registry deprecation

Packagist marks the entire package as abandoned, with no replacement listed. Package-wide deprecation is a severe warning for a dependency, regardless of its otherwise stable version.

Release history

The package has 57 historical releases, but its latest release was in April 2018 and it had no releases in the last 12 months. This long release gap strongly indicates that the assessed version is obsolete.

Repo commit activity

The repository had zero commits and zero active maintainers in the three months before collection. This supports the abandonment concern rather than showing ongoing maintenance.

Repository archived

The linked source repository is archived, which indicates the project is no longer intended for active maintenance. Although it was last pushed in March 2024, the archived status still creates substantial abandonment risk.

Security policy

The repository has no security policy. This is a transparency and vulnerability-reporting gap, adding some concern to an already unmaintained project.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Scott Walkinshaw

Ben Word

Direct Dependencies

Dependency	Last Release	Score
oscarotero/env Version ^1.1.0	—	—
vlucas/phpdotenv Version ^2.0.1	—	—
composer/installers Version ^1.4	—	—
johnpbloch/wordpress Version 4.9.5	—	—
roots/wp-password-bcrypt Version 1.0.0	—	—