alleyinteractive/wp-bulk-task
The source tree includes tests, a changelog, release notes, and a security policy. Organization backing, a clear license, and no high-severity workflow findings provide useful reassurance, though workflow action references are not pinned.
64%
Total Score
75
93
100
Health Score Breakdown
The package has 10 releases since November 2022, but none in the last 12 months; the latest release was about 14 months ago. This points to slowed maintenance, although the prior cadence was regular.
The repository recorded no commits and no active maintainers in the last 3 months. This is a meaningful maintenance concern, but the package was last pushed with the assessed release.
The single workflow was fully analyzed with no reported audit findings or untrusted checkout paths. However, all 3 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Alley |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 alleyinteractive/composer-wordpress-autoloader Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.