alleyinteractive/wp-command-palette

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement provided. This is a severe adoption risk because future fixes and support are uncertain.

Release historydanger

Only two releases exist, with the latest published about two years ago and no releases in the last 12 months. That shows publication has effectively stopped.

Repo commit activitydanger

The repository had zero commits and zero active maintainers during the last three months. This reinforces the abandonment risk rather than indicating a merely slow release cadence.

Repository archiveddanger

The linked source repository is archived, indicating that the project is no longer maintained as an active development target. This outweighs its otherwise clear project structure and documentation.

Workflow auditcaution

All five workflows were analyzed, but all 10 action references are unpinned, four workflows grant top-level write permissions, and a high-confidence finding reports a package installed outside a lockfile. These are workflow hygiene concerns, not the primary reason for the critical score.