Generate a Composer repository from installed WordPress plugins and themes.
22%
Total Score
67
100
88
83
Packagist marks the entire package as abandoned and provides cedaro/satispress as the replacement. This is a direct maintenance and adoption risk for a new dependency.
One contributor made all six commits in the last three months. Organization backing provides some handoff capacity, but the observed recent work remains concentrated.
The repository recorded six commits in the last three months, so activity has not stopped. However, all recent commits came from one active maintainer, limiting the demonstrated maintenance base.
All four workflows were analyzed without failures, but all 13 action references are unpinned and the publish workflow has two high-confidence template-injection findings. These are meaningful workflow hygiene concerns, though no dangerous trigger or untrusted checkout was reported.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3.0 | — | — |
pimple/pimple Version ^3.5 | — | — |
psr/container Version ^2.0 | — | — |
composer/semver Version ^3.2 | — | — |
cedaro/wp-plugin Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.