Package Health/htmlburger/wpemerge-theme

htmlburger/wpemerge-theme

The repository has no security policy, and all four workflow actions are unpinned, leaving avoidable maintenance and build-integrity gaps. A read-only workflow token, a clear license, and release notes for this version provide useful safeguards.

Latest 0.17.1

Packagist

58%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 16 releases since May 2018, but none in the last 12 months; its latest release was in April 2022, about 4 years ago. This indicates substantial abandonment risk despite an earlier regular cadence.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the package's long release gap. The repository is not archived, but current maintenance capacity is not demonstrated.

Security policy

The linked repository has no security policy, reducing transparency about how vulnerabilities are reported and handled. This matters for a framework-based WordPress theme with runtime dependencies.

Workflow audit

All 4 analyzed action references are unpinned, which weakens build reproducibility; the audit also found a high-confidence low-severity adhoc package installation. The workflow uses read-only permissions and has no untrusted checkout or script-injection findings, which limits the impact.