dmitryrechkin/php-wp-phpunit-bootstrap

Release historydanger

The package has only one release, published nearly four years ago, with no releases in the last 12 months. That leaves little evidence of ongoing maintenance for a dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and increasing abandonment risk.

Licensecaution

A license file is present in both the artifact and repository, which is positive, but the manifest declares AGPL-3.0-only while the detected file is GPL-3.0; that mismatch reduces clarity for adopters.

Maintainerscaution

One registry maintainer is reasonable for a small personal utility, but it provides limited maintenance redundancy when recent activity is absent.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are configured. For a small utility this is a modest transparency and maintenance gap rather than a standalone severe risk.