globalis/wp-cubi

Dependency profilecaution

The package declares 21 runtime dependencies, including WordPress, plugins, logging, administration, and security components. That breadth is expected for a WordPress stack but increases transitive maintenance exposure.

Lifecycle scriptscaution

The package runs a post-create-project-cmd script during project creation. This is relevant install-time behavior and adds some supply-chain and reproducibility surface, though only one script is reported.

Release historycaution

The package has existed for 3399 days with 72 releases, but only one release in the last 12 months. The latest release is recent enough to show continued publishing, though the cadence is now slow.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The recent release partly offsets this, but the lack of current development activity is a meaningful maintenance concern.

Repo toolingcaution

Composer and Robo provide build tooling, but no security-scanning tool is reported. Build support is present while automated security coverage is not evident.