It is clearly licensed, stable, and tied to an organization-owned repository that matches the package. The workflow audit found no dangerous sinks, but its five action references are unpinned.
64%
Total Score
75
92
50
The package has had four releases but none in the last 12 months, indicating a meaningful maintenance slowdown for a published testing tool.
The repository recorded no commits and no active maintainers in the last 3 months, which raises the risk that maintenance has stalled.
The workflow audit completed cleanly with no dangerous sinks or audit findings, but all five analyzed action references are unpinned, leaving avoidable supply-chain hygiene risk.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
wp-cli/wp-cli Version dev-main | — | — |
wp-cli/wp-cli-tests Version ^4 | — | — |
wp-cli/wp-cli-bundle Version dev-main | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.