Tests, release notes, and a clear README provide useful adoption context. The code is explicitly experimental and untested with current WordPress, while licensing differs between the MIT declaration and detected CC0 file; maintenance also rests with one contributor.
54%
Total Score
50
71
75
The manifest declares MIT, but the artifact and repository license file is detected as CC0-1.0. That mismatch creates avoidable uncertainty about the terms of this release.
The package includes a substantial README, tests, and release notes, which support adoption. However, its own documentation says it has not been tested with current WordPress versions for years, a material compatibility concern.
This is the package's only release, published 176 days ago, so there is little release history from which to judge stability or responsiveness.
One contributor made 100% of the 3 commits in the last 3 months. With user-owned project backing, this concentration leaves a clear continuity risk.
The repository recorded 3 commits in the last 3 months, showing some recent activity, but the volume is too small to demonstrate sustained maintenance capacity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
pradosoft/prado Version ^4.2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.