humanmade/local-vip
The declared GPL license conflicts with an MIT license file, and the repository has no security policy. Strong documentation, a matching repository, and detailed release notes provide useful transparency despite the maintenance concerns.
58%
Total Score
75
100
83
83
Health Score Breakdown
The manifest declares GPL-2.0-or-later, but the detected artifact license file says MIT. Because the repository has no separate license file, this unresolved mismatch creates a transparency concern.
The latest release was nearly three years ago, with no releases in the last 12 months; this materially raises abandonment risk despite 11 releases since 2020.
There were no commits and no active maintainers in the last three months, consistent with the nearly three-year gap since the last push and a meaningful maintenance concern.
There were no new or closed issues or pull requests in the last month, while five issues remain open; this supports the conclusion that current maintenance is limited.
Composer build tooling is present, but no security-scanning tooling was detected. For a Docker- and dependency-based development environment, that is a modest hygiene gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Human Made |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/yaml Version ~5.3.6 | — | — |
humanmade/wp-redis Version ^1.1 | — | — |
humanmade/wordpress-pecl-memcached-object-cache Version ^2.1 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.