Package Health/eighteen73/wordpress-thumbor

eighteen73/wordpress-thumbor

The plugin has a clear README, MIT licensing, a tiny dependency footprint, and release notes for this version. Its organization backing and non-archived repository help, but the project remains early-stage.

Latest v0.2.0

Packagist

57%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

The repository had zero commits and zero active maintainers in the last 3 months, following a last push about 13 months ago. That is meaningful evidence of stalled maintenance.

Release history

Only 3 releases have appeared across about 2 years and 8 months, with no releases in the last 12 months and a median gap of about 9 months. This indicates a slow maintenance cadence for a plugin that is still described as early-stage.

Repo issue activity

There were no new or closed issues or pull requests in the last month, while two issues remain open. This is consistent with limited current project activity.

Repo tooling

Composer is used as a build tool, which fits the package ecosystem, but no security scanning tools are reported. The missing scanning is a modest transparency gap rather than a severe dependency risk.

Security policy

The repository has no security policy. For a WordPress plugin handling image URLs and configuration, this weakens the documented path for reporting vulnerabilities.