carbonorm/carbonwordpress
The MIT license, useful README, matching repository, and organization backing improve transparency and make the project easier to evaluate. Install-time scripts and no security scanning or policy add maintenance and operational concerns.
45%
Total Score
50
67
50
Health Score Breakdown
The package has 45 releases but none in the last 12 months, and its latest release was about two years and five months ago. The early burst of releases does not compensate for the prolonged current gap.
The repository had zero commits and zero active maintainers in the last three months, consistent with the long release gap and raising abandonment risk.
The package runs post-install and post-update Composer scripts, increasing the amount of code executed during dependency operations. This is not inherently unsafe, but it deserves more trust in a package with weak recent maintenance evidence.
There were no new or closed issues or pull requests in the last month. With no recent commits, this provides no evidence of ongoing maintenance.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these figures offer little evidence of an active user or contributor community.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 richardtmiles |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 carbonorm/carbonphp Version dev-lts | — | — |
composer/installers Version ^2.0@dev | — | — |
wp-cli/wp-cli-bundle Version dev-main | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.