The package is licensed and includes a substantial README, changelog, and coherent project tree. Its install-time script and 14 runtime dependencies add operational complexity, while the repository could not be found for verifying current maintenance.
38%
Total Score
50
80
75
Only two releases exist, with the latest in January 2019 and none in the last 12 months; about seven years without a release is strong abandonment evidence.
Fourteen runtime dependencies, including WordPress, plugins, and configuration helpers, create a broad update surface and increase the cost of maintaining this old release.
The post-root-package-install script runs during installation, adding execution and maintenance complexity that consumers should account for.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
roots/soil Version ^3.7 | — | — |
oscarotero/env Version ^1.1.0 | — | — |
roots/wordpress Version 5.0.3 | — | — |
roots/wp-config Version 1.0.0 | — | — |
vlucas/phpdotenv Version ^2.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.