develtio/wp-loader

The MIT license, focused 10-file tree, and usable README make the package easy to inspect and integrate. Organization backing and a matching repository support provenance, but the project lacks security scanning and has no tests or changelog.

Latest 1.0.1

Packagist

40%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases were published, with the latest in January 2021 and none in the last 12 months. This leaves the package with substantial abandonment risk despite its stable version.

Repo commit activity

The repository recorded no commits or active maintainers in the last three months, consistent with the long gap since the latest release. This materially lowers confidence in ongoing maintenance.

Repo popularity

The repository has only 2 stars and no forks, providing little supporting evidence of broad adoption or community maintenance. Popularity is not decisive, but it offers no meaningful compensation for the inactivity.

Repo tooling

Composer is used for the build, which is appropriate, but no security-scanning tools are configured. That is a maintenance and transparency gap for a package intended for dependency use.

Security policy

No security policy is present in the linked repository, leaving vulnerability reporting and response expectations undocumented. This is a modest transparency concern.