automattic/jetpack-calypsoify

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement provided; this is a severe adoption risk for a dependency.

Repo commit activitydanger

The repository had zero commits and zero active maintainers in the past 3 months, providing no evidence of ongoing maintenance.

Repository archiveddanger

The linked Automattic repository is archived, which signals that active development has ended even though it was pushed recently.

Dangerous workflowscaution

One of two workflows uses pull_request_target, creating elevated workflow risk, although no untrusted checkout or script-injection pattern was detected.

Project backingcaution

The package is backed by the Automattic organization, which provides project context, but organizational ownership does not compensate for the archived state and absent recent activity.