Build tooling and release notes provide useful transparency, and the repository remains available under organizational ownership. However, adoption carries substantial abandonment risk; pin this version only if you can maintain the integration yourself.
35%
Total Score
50
57
75
The package is reported to borrow the identity of automattic/vipwpcs, which has far more downloads and stable releases. Even without artifact overlap, consumers could select this package unintentionally.
The package has had no releases in the last 12 months, and its latest release was in July 2019. This long period without updates is a significant maintenance concern.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's prolonged release gap.
There were no new or closed issues or pull requests in the last month, while six issues remain open. This suggests little recent maintenance activity.
The project uses Make and Composer, which supports reproducible project operations, but it has no reported security scanning tooling.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.