8grams/bedrock

The package has a clear MIT license, a useful README, and an organization-backed repository that matches the package. Workflow references are all unpinned and no security policy is present, so maintenance and build hygiene deserve attention.

Latest v1.0.2

Packagist

60%

Total Score

Maintainer Stability

Dependencies

Maturity

Supply Chain

Health Score Breakdown

Dependency profile

The package declares 13 runtime dependencies, including WordPress, configuration, and several plugins. This is a substantial dependency surface that increases maintenance exposure, but it is consistent with a WordPress boilerplate.

Release history

The latest release was over a year ago, with no releases in the last 12 months, despite three releases overall. This indicates a meaningful maintenance concern for a package intended to track a WordPress project.

Repo commit activity

There were no commits and no active maintainers in the most recent three months. Combined with the long release gap, this is evidence of slowed maintenance.

Repo popularity

The repository has no stars and one fork. This is weak supporting evidence, but popularity alone does not determine the health of a small package.

Repo tooling

Composer is used for builds, but no security-scanning tool was detected. The missing scanning is a hygiene gap rather than evidence that the package is unsafe.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Scott Walkinshaw

Ben Word

Glend Maatita

Direct Dependencies

Dependency	Last Release	Score
oscarotero/env Version ^2.1	—	—
roots/wordpress Version 6.7.2	—	—
roots/wp-config Version 1.0.0	—	—
vlucas/phpdotenv Version ^5.5	—	—
composer/installers Version ^2.2	—	—