getpop/migrate-custompostmeta
The package has a clear license, a usable README, and a lightweight dependency profile. Its organization-owned repository is not archived, but the long inactivity and withdrawn registry status make continued use difficult to justify.
18%
Total Score
0
100
67
83
Health Score Breakdown
The package is marked abandoned on Packagist at package scope, with no replacement identified beyond the same package name. This is a direct warning against taking a new dependency on this release.
The latest release was published in February 2021, and there were no releases in the last 12 months as of the September 2026 assessment. That is about five years and seven months without a release.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's prolonged release inactivity. The repository was last pushed about five years and six months ago.
The repository has no security policy, reducing transparency for reporting and handling security issues. The README does provide an email contact, which partly compensates for the missing formal policy.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Leonardo Losoviz |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.