automattic/buddypress-vip-go

Name lookalikedanger

The package is flagged as borrowing the identity of the much more downloaded automattic/vipwpcs package, with 434,212 monthly downloads versus 0 for this package. Although artifact overlap is 0 and the repository matches this package, the identity borrowing still creates a serious risk that consumers select the wrong dependency.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last three months. Recent release activity provides some evidence of maintenance, but it does not offset the current lack of source changes.

Security policycaution

The repository has no security policy. For a plugin handling media and access-related integration, this is a transparency gap, although Dependabot scanning provides some compensating security practice.