carawebs/wp-plugin-settings
The package includes a README and a declared GPL-2 license, but its documentation says it is not suitable for production and the repository has no security policy. Expect to own compatibility and maintenance work if you adopt it.
30%
Total Score
0
57
75
Health Score Breakdown
The latest release was about 9 years ago, with no releases in the last 12 months and only five releases overall. This is strong evidence of abandonment, despite the package not being registry-deprecated.
The repository had zero commits and zero active maintainers in the past 3 months, consistent with the long gap since its last release. This materially increases abandonment risk.
The artifact includes a 1,537-character README, which gives consumers basic usage guidance. The README also states that the package is still in development and unsuitable for production, limiting that positive evidence.
The repository has 1 star, 0 forks, and 1 watcher, providing little supporting evidence of community review or shared maintenance. Low popularity alone is not decisive.
Composer build tooling is present, but no security-scanning tooling was detected. This is a modest hygiene gap and does not by itself establish that the release is unsafe.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 David Egan |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 9 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.