carawebs/wp-custom-widgets

Release historydanger

The latest release was in May 2017, with no releases in the last 12 months despite the package being over nine years old. This is strong evidence of abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history and indicating no current maintenance.

Licensecaution

The manifest declares MIT while the artifact license file is detected as GPL-3.0. Although a license file exists, this mismatch creates a meaningful adoption and compliance concern.

Package scaffoldingcaution

The package has a README, but it explicitly says the project is in development and not ready for production. Missing tests and a changelog are normal for published artifacts and are not counted against it.

Security policycaution

The linked repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This compounds the risk for an old package with no recent maintenance.