Package Health

flying/wordpress-composer

It has a clear MIT declaration, a README, and a repository that matches the package. Its small footprint and lack of security scanning limit transparency, while the dependency adds another maintenance point to monitor.

Latest v0.3.0PackagistPackagist

48%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

69

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Dependency profilecaution

The package declares one runtime dependency, flying/wordpress-composer-tools. This is a modest dependency surface, but it adds another package whose maintenance must be trusted.

Release historycaution

The package has only 3 releases, with none in the last 12 months and the latest published in March 2022. The long median release interval indicates a substantial abandonment risk for a package intended to support project setup.

Repo commit activitycaution

The repository had 0 commits and 0 active maintainers in the last 3 months. Combined with the old latest release, this is strong evidence that maintenance has stopped or substantially slowed.

Repo popularitycaution

The repository has 0 stars, 0 forks, and 1 watcher. Popularity is only supporting evidence, but these counts provide little external evidence of review or ongoing use.

Repo toolingcaution

Composer is used as the build tool, which fits the package ecosystem. No security scanning tools are configured, leaving a modest transparency and maintenance-hygiene gap.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Alexander Grimalovsky

Direct Dependencies

DependencyLast ReleaseScore
flying/wordpress-composer-tools
Version ^0.3
—
—

Weekly Downloads

Info

Last Published
4 years ago
Created
10 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform