blax-software/wordpress-plugin-framework
Risky to adopt: this package has had only one release, published over three years ago, with no recent commits or active maintainers. It has tests, release notes, organization backing, and a matching repository, but the missing license and prolonged inactivity remain serious concerns.
45%
Total Score
50
64
Health Score Breakdown
The package has only one release, with no releases in the last 12 months, indicating very limited maturity and a long period without published maintenance.
There were no commits and no active maintainers in the last three months, which is a substantial abandonment concern for a framework dependency.
No declared license or license file was found in either the package or repository, leaving the legal terms for using the dependency unclear.
The repository uses Composer build tooling, but has no security scanning; this is a hygiene gap, though it is less significant than the package's inactivity and does not itself make the release unfit.
Version 0.1.0 is not a stable major release, so the API may still change; this compounds the risk created by the package's sparse release history.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Blax Software |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/console Version ^6.2 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.