jazzman/wp-block-parser
Composer tooling and Dependabot provide some maintenance structure. The missing license, absent README, and unpinned workflow actions add adoption and supply-chain concerns.
45%
Total Score
0
60
50
Health Score Breakdown
The package has had 4 releases since November 2023, but none in the last 12 months; version 0.0.4 was released in April 2024, over two years ago.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap and indicating weak current maintenance.
Neither the package nor the linked repository contains a declared or detected license or a license file, leaving developers without clear permission to use the code.
The package has no README, tests, or changelog, although release notes exist for this version and the source tree is small; the missing README still reduces consumer transparency for a library.
All 6 analyzed action references are unpinned, and the audit found one high-confidence medium-severity use of an archived action. The workflows had no unsafe triggers or untrusted checkouts, which limits the risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Vasyl Sokolyk |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 composer/installers Version ^2.2 | — | — |
jazzman/wp-app-config Version ^2.3 | — | — |
jazzman/autoload-interface Version ^0.3.1 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.