leoloso/pop-app-wp

Release historydanger

The latest release was in December 2019, with no releases in the last 12 months despite the package being nearly 7 years old. This is strong evidence of abandonment risk.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last 3 months; its last push was in February 2020, over 6 years ago. That substantially weakens evidence of ongoing maintenance.

Lifecycle scriptscaution

The package runs a post-create-project-cmd lifecycle script during Composer project creation. This warrants attention because installation performs automated actions, but the signal alone does not show unsafe behavior.

Repo popularitycaution

The repository has only 2 stars and 1 fork, so there is little community activity to compensate for the long maintenance gap.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response. This adds a maintenance and governance concern, though it is less serious than the inactivity.