Config-driven WordPress shortcodes.
68%
Total Score
caution
Usable with caveats: no releases in the last year and all workflow actions are unpinned.
The package declares eight runtime dependencies, including several closely related Bright Nucleus components; this is a meaningful dependency surface but not excessive for a configurable WordPress component.
The package has existed since February 2016 with 34 releases, but it had no releases in the last 12 months; the recent pause is a maintenance concern despite its long history.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the concern that maintenance has slowed, though the latest release and push were relatively recent.
There are two open issues and one open pull request, with no issues or pull requests opened or merged in the last month; this suggests limited current project interaction but not abandonment on its own.
The repository has 11 stars and 2 forks, indicating a small user base; this is supporting context only and does not outweigh the repository's documented structure and history.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
brightnucleus/view Version >=0.5 | — | — |
brightnucleus/config Version >=0.5 | — | — |
brightnucleus/invoker Version >=0.2 | — | — |
gamajo/template-loader Version >=1.2 | — | — |
brightnucleus/contracts Version >=0.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.