26b/wp-attachments
A README, release notes, organization backing, and security scanning provide useful transparency. The repository has no commits or active maintainers in the last three months, while all eight workflow actions are unpinned and the license declarations disagree.
57%
Total Score
75
100
81
63
Health Score Breakdown
The artifact contains a license file and the repository also has one, but the manifest declares GPL-3.0 while the detected license is AGPL-3.0. The mismatch creates real licensing uncertainty.
post-install-cmd and post-update-cmd scripts run during Composer installation or updates, adding execution-time supply-chain exposure beyond ordinary dependency resolution.
Four releases over 419 days, including two in the last 12 months and a median interval of about 74 days, show some release continuity but not a mature cadence.
The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance warning, although the recent repository push and releases provide limited counterevidence.
There are nine open pull requests, with no new or merged pull requests in the last month. The backlog and lack of recent integration suggest slowed project activity.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 26b |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 26b/wp-framework Version ^1.6 | — | — |
Weekly Downloads
Info
- Last Published
- 8 months ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.