A modern WordPress boilerplate repository. Integrates composer packages, namespacing and a better directory structure.
35%
Total Score
unhealthy
Risky: a single release from 2017 and no recent repository activity leave maintenance uncertain.
This package has one release, published 9 years ago, with no releases in the last 12 months. That is strong evidence of abandonment risk for a dependency.
Only one registry maintainer is listed, leaving a thin publishing base. Because the repository is also owned by the same individual, there is no organizational backing to compensate for that concentration.
The artifact has no README, tests, or changelog. Missing tests and changelog are normal for published artifacts, but the missing README weakens consumer guidance for a WordPress boilerplate.
The repository is owned by an individual user rather than an organization, and no stronger project backing is shown. Combined with the single release and inactive repository, this increases continuity risk.
Composer build tooling is present, but no security scanning tooling is reported. The missing scanning is a modest transparency and maintenance gap rather than proof of a defect.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
vlucas/phpdotenv Version ^2.4 | — | — |
composer/installers Version ^1.4 | — | — |
johnpbloch/wordpress Version ^4.8 | — | — |
roots/wp-password-bcrypt Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.