axepress/wp-graphql-rank-math

Lifecycle scriptscaution

Composer install and update lifecycle scripts run during dependency operations. These are a supply-chain surface that warrants care, although the signal alone does not show malicious or unsafe behavior.

Release historycaution

The package has 24 releases over roughly four years, but its latest release was about 15 months ago and there were no releases in the last 12 months. This indicates a meaningful maintenance slowdown.

Repo commit activitycaution

The repository had no commits and no active maintainers in the last three months. Combined with the absence of releases in the last 12 months, this supports a maintenance-slowdown concern.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. The missing scanning coverage is a modest transparency and maintenance gap rather than a standalone severe risk.

Version stabilitycaution

Version 0.3.4 is not a prerelease, but the package remains below 1.0, so breaking changes remain more likely than for a mature stable-major release.