constlab/wp-cartonbox-shortcode

Release historydanger

This is the only release, published in July 2017, with no releases in the last 12 months. The long period without a new release is strong evidence of abandonment risk.

Repo toolingcaution

Composer is used as a build tool, which is appropriate for a Packagist package. No security scanning tooling is present, a minor transparency gap for an old, inactive project.

Repository archivedcaution

The repository is not archived, which is reassuring, but it was last pushed in July 2017. The inactive repository materially weakens confidence in ongoing maintenance.

Security policycaution

The repository has no security policy. For a small, inactive WordPress package this reduces disclosure transparency, though it is less significant than the maintenance gap.