Package Health

jscarton/bedrock

A modern WordPress stack

Latest 1.6.4PackagistPackagist

35%

Total Score

unhealthy

Risky: no release or commit activity since July 2016, despite the repository remaining unarchived.

Health Score Breakdown

Release historydanger

The latest release was published in July 2016, and there have been no releases in roughly 10 years. That is strong evidence of abandonment for a project intended as a maintained WordPress stack.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. The unarchived status does not show that maintenance is actually occurring.

Repo popularitycaution

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these counters provide no external maintenance signal alongside the inactive commit history.

Repo toolingcaution

Composer is used as the build and dependency tool, supporting reproducible project setup. No security scanning tooling is present, a modest hygiene gap for a package that configures a web application stack.

Security policycaution

The repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is secondary to the much stronger evidence of inactivity.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Scott Walkinshaw
Ben Word

Direct Dependencies

DependencyLast ReleaseScore
oscarotero/env
Version ^1.0
—
—
vlucas/phpdotenv
Version ^2.0.1
—
—
composer/installers
Version ~1.0.12
—
—
johnpbloch/wordpress
Version 4.5.3
—
—
roots/wp-password-bcrypt
Version 1.0.0
—
—

Weekly Downloads

Info

Last Published
10 years ago
Created
12 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform