boxuk/wp-iconography
The package has a clear README, a small dependency set, organization backing, and Composer/Sonar tooling. The missing license and low version maturity add adoption friction.
55%
Total Score
75
100
79
75
Health Score Breakdown
No declared license or license file was found in the package or repository, leaving the legal terms for dependency use unclear.
The package has had no registry release in 19 months, after 11 releases over roughly two years; this suggests maintenance may have slowed despite its earlier regular cadence.
The repository recorded no commits and no active maintainers in the last 3 months, which is a modest maintenance concern but not evidence of abandonment by itself.
The repository has no security policy, reducing transparency about how vulnerabilities should be reported; this is partly offset by the presence of Sonar scanning.
Version 0.0.11 is not on a stable major version, so compatibility expectations are weaker even though it is not marked as a prerelease.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 BoxUK |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 swaggest/json-schema Version ^0.12 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.