lunapress/wp-assets

Licensecaution

Neither the package nor the linked repository provides a declared license or license file. That creates a material adoption and redistribution uncertainty.

Release historycaution

This package has released only once, about five months ago, with no subsequent release activity. That is limited maturity evidence for a dependency, though the project is still relatively young.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. For a package with only one release, that weakens confidence that defects or compatibility changes will be addressed.

Repo toolingcaution

The project uses Composer, which supports reproducible PHP dependency management, but it has no security scanning tool. That leaves a useful maintenance safeguard absent.

Security policycaution

The repository has no security policy. This is a transparency gap for reporting and handling vulnerabilities, although it does not by itself show that the package is unsafe.