automattic/jetpack-publicize-components

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement specified. This directly indicates that developers should not expect continued support or maintenance.

Repo commit activitydanger

The repository had no commits and no active maintainers during the last three months, reinforcing the archived and abandoned status.

Repository archiveddanger

The linked Automattic repository is archived, which is a severe abandonment signal even though it was last pushed in January 2026.

Dangerous workflowscaution

One of the two analyzed workflows uses pull_request_target, which can require careful handling of untrusted pull requests. No untrusted checkout or script injection was detected, so this is a limited concern.

Project backingcaution

The package and repository are backed by the Automattic organization, providing clear ownership context. That backing does not compensate for the package being marked abandoned and the repository being archived.