dashifen/wp-templates

Its narrow scope, MIT license, and matching repository make the package easy to inspect and integrate. The single maintainer and lack of security scanning leave less maintenance depth than mature dependencies.

Latest 6.1.1

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published in January 2024, with no releases in the following two years and eight months. This is meaningful staleness for a dependency, although the package has 26 releases and a long history.

Repo commit activity

There were no commits and no active maintainers in the last three months. Combined with the old latest release, this supports a caution about current maintenance.

Repo popularity

The repository has one star and two forks, indicating limited external adoption and review. Popularity is only supporting evidence, so this modestly reduces confidence rather than determining the verdict.

Repo tooling

Composer is used for the build, which fits the package ecosystem, but no security scanning tools were detected. The missing scanning is a hygiene limitation rather than a severe dependency risk.

Security policy

The repository has no security policy, leaving vulnerability reporting and disclosure expectations unspecified. This is a transparency gap, though it is less serious for this small, inactive package than archival or deprecation would be.