Package Health

johnpbloch/wordpress-project

An out-of-the-box composer-powered WordPress package inspired by Mark Jaquith's WordPress Skeleton

Latest 1.0.3PackagistPackagist

58%

Total Score

caution

Usable with caveats: no release or repository activity since July 2022.

Health Score Breakdown

Dependency profilecaution

The package declares seven runtime dependencies, including WordPress core, installers, WP-CLI, and dotenv; this is a meaningful dependency surface for a starter project but not unusually large.

Release historycaution

The package has nine releases over roughly 13 years, but none in the 12 months before assessment; the latest release was July 2022, indicating stalled maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and raising abandonment risk.

Security policycaution

The repository has no security policy, reducing transparency for vulnerability reporting; this is a minor hygiene gap rather than evidence that the package is unsafe.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
laravel/helpers
Version ^1.5
—
—
vlucas/phpdotenv
Version ^5.4
—
—
illuminate/support
Version ^8.83
—
—
johnpbloch/wp-cli-phar
Version ^2.6
—
—
johnpbloch/wordpress-core
Version @stable
—
—

Weekly Downloads

Info

Last Published
4 years ago
Created
13 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform