automattic/msm-sitemap
The source includes tests, release notes, and a substantial README, while Automattic backing and pinned, read-only workflows support transparency. No commits in three months raises a maintenance concern.
48%
Total Score
75
100
89
83
Health Score Breakdown
The package is reported to borrow the identity of automattic/vipwpcs, a much more downloaded package, and is not described as a fork or integration. The artifact has no overlap, but the identity signal remains a serious adoption risk.
The repository recorded zero commits and zero active maintainers in the last three months. Recent pull-request activity and a recent push provide some context, but they do not demonstrate ongoing maintenance.
The repository has no published security policy. This is a transparency gap, though it is partly offset by Dependabot and the workflow audit results.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Automattic |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 composer/installers Version ^1.0 || ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 months ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.