The artifact is clearly licensed and includes a README, but those positives do not offset the maintenance and identity concerns. Use roots/wordpress-full instead.
8%
Total Score
0
43
100
The package borrows the identity of composer/pcre, a much more downloaded package owned by someone else, and is not described as a fork; consumers may have intended to select the lookalike instead.
Packagist marks the entire package abandoned and names roots/wordpress-full as its replacement, making continued adoption a serious maintenance risk.
The latest release was May 24, 2022, with no releases in the last 12 months; this indicates prolonged abandonment rather than a briefly slower cadence.
The repository recorded zero commits and zero active maintainers over the last three months, reinforcing the lack of ongoing maintenance.
The linked repository is archived and was last pushed in May 2022, so it is no longer receiving normal project maintenance.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.