Package Health

greenpeace/planet4-child-theme-ummah

Its documentation is brief, but the package is clearly licensed and backed by Greenpeace. The small repository and lack of security tooling leave less independent evidence for long-term maintenance.

Latest v0.16PackagistPackagist

62%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

81

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historycaution

The package has 16 releases over roughly six years, but none in the last 12 months; the latest release was about 14 months ago. This indicates slowing maintenance, though the earlier release cadence shows an established project.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last 3 months. This supports the broader sign of slowing maintenance, although it does not by itself establish abandonment.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tool is configured. For a small child theme this is a hygiene gap, with the main concern being limited independent evidence of ongoing maintenance.

Security policycaution

The linked repository has no security policy. This is a transparency gap, though the package's small theme scope makes it less severe than it would be for security-sensitive software.

Version stabilitycaution

Version v0.16 is not a prerelease, but the package has not reached a stable major version. This is a modest maturity concern rather than a severe adoption risk.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
1 year ago
Created
6 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform