devgeniem/better-wp-install-dropin

Release historycaution

The latest release was published nearly ten years ago, with no releases in the last 12 months. The repository was pushed more recently, which partly offsets the stale registry release but does not establish current release maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. A repository push more than two years ago shows it is not archived, but does not demonstrate ongoing maintenance.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tooling is present. For a small PHP drop-in this is a hygiene gap rather than a severe dependency risk.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This lowers transparency but is not by itself evidence that the package is unsafe.