The package is small and clearly documented for its WordPress integration. Treat it as legacy code and avoid adopting it for new projects.
22%
Total Score
50
75
The package has had no registry release in more than two years, with only three releases since April 2023 and none in the last 12 months.
The repository recorded no commits and no active maintainers in the last three months, reinforcing the lack of current maintenance.
The linked repository is archived, which is a severe abandonment risk even though it was pushed in February 2025.
All five workflows were analyzed with no reported audit findings or untrusted checkouts, but all seven action references are unpinned and two workflows grant top-level write permissions; without an untrusted trigger these are hygiene concerns rather than severe risks.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.