johnpbloch/loopable-query

Name lookalikedanger

The package has zero monthly downloads versus 217,180 for johnpbloch/wordpress-core, borrows that package's identity, and has only one stable release versus 885. The overlap is not near-complete, but the identity borrowing makes it a significant adoption risk.

Release historydanger

The package has only one release, published more than 13 years ago, with no releases in the last 12 months. This is strong evidence of abandonment despite the package not being registry-deprecated.

Repository archivedcaution

The repository is not archived, which avoids an explicit abandonment marker. However, its last push was more than 13 years ago, so this does not overcome the stale release history.

Security policycaution

The repository has no security policy. For a small, long-inactive package this is a transparency gap, although it is less significant than the lack of recent releases.