iastate/wordpress-profile-plugin

Release historydanger

This is the only release, published about 3 years and 11 months ago, with no releases in the last 12 months. That strongly raises abandonment risk despite the package not being deprecated.

Repo commit activitydanger

The repository has recorded zero commits and zero active maintainers in the last 3 months, consistent with the long release gap and weakening evidence of ongoing maintenance.

Licensecaution

No license is declared and neither the package nor the linked repository contains a license file. This creates a material adoption and redistribution concern.

Package file treecaution

The release and repository each contain only three files, indicating a very small project with limited visible implementation and maintenance context. The small footprint may be appropriate for a simple plugin, so this is only a modest concern.

Repo toolingcaution

Composer is used for build or package management, but no security scanning tools are configured. That is a modest transparency and maintenance gap, not evidence of maliciousness.