grafikfabriken/bedrock
WordPress boilerplate with modern development tools, easier configuration, and an improved folder structure
42%
Total Score
50
63
50
Health Score Breakdown
The package has 84 releases since December 2013, but none in the last six years; the latest registry release was in April 2020. This long inactivity is a substantial abandonment concern.
Sixteen runtime dependencies, including several WordPress plugins, are consistent with a WordPress starter stack but create a broad update surface and additional maintenance burden.
The package runs a post-root-package-install script, adding install-time behavior that consumers must account for. Only one script is reported, so this is a limited concern rather than a severe risk.
The package uses a stable major version and has no recent prerelease activity, which supports maturity. However, the registry reports 1.13.4 as latest while this assessment is for 1.13.6, making the release metadata less clear.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Scott Walkinshaw |
| Ben Word |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 oscarotero/env Version ^1.2.0 | — | — |
roots/wordpress Version 5.4 | — | — |
roots/wp-config Version 1.0.0 | — | — |
vlucas/phpdotenv Version ^4.1.3 | — | — |
composer/installers Version ^1.8 | — | — |
Weekly Downloads
Info
- Last Published
- 6 years ago
- Created
- 12 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.