evo-mark/wp-vite

The repository has had no commits in three months and only one release in the last 12 months. Its workflow also needs dependency pinning, while licensing and documentation are in place; organization backing provides some continuity.

Latest v1.3.2

Packagist

64%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 28 releases over about three years, but only one release in the last 12 months, indicating a currently slow cadence without proving abandonment.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, leaving limited recent evidence of ongoing maintenance.

Repo tooling

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and maintenance gap.

Security policy

The linked repository has no security policy, so vulnerability-reporting guidance is not documented for consumers or contributors.

Workflow audit

The single workflow was fully analyzed and scopes permissions at job level, with no untrusted checkout or script-injection findings. However, all 8 action references are unpinned and two high-confidence medium-severity findings involve archived actions, which weakens build reproducibility and maintenance hygiene.