A modern WordPress stack
35%
Total Score
unhealthy
Risky: no release or commit activity since July 2016, despite the repository remaining unarchived.
The latest release was published in July 2016, and there have been no releases in roughly 10 years. That is strong evidence of abandonment for a project intended as a maintained WordPress stack.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. The unarchived status does not show that maintenance is actually occurring.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these counters provide no external maintenance signal alongside the inactive commit history.
Composer is used as the build and dependency tool, supporting reproducible project setup. No security scanning tooling is present, a modest hygiene gap for a package that configures a web application stack.
The repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is secondary to the much stronger evidence of inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
oscarotero/env Version ^1.0 | — | — |
vlucas/phpdotenv Version ^2.0.1 | — | — |
composer/installers Version ~1.0.12 | — | — |
johnpbloch/wordpress Version 4.5.3 | — | — |
roots/wp-password-bcrypt Version 1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.