This release appears generally suitable to depend on: it is MIT-licensed, not deprecated or archived, has a documented six-file artifact, reproducible stub-generation workflow, active recent repository commits, and no analyzed dangerous workflow patterns. The main reservations are that the project is young at 34 days, all 11 recent commits come from one contributor, there is no security policy, and two workflows have top-level write permissions. These are meaningful transparency and continuity concerns, but they do not outweigh the concrete maintenance and packaging evidence for this narrowly scoped development-time stubs package.
78%
Total Score
60
100
89
80
Only one registry maintainer is listed. Because the repository is user-owned rather than organization-owned, this represents a real publishing continuity and bus-factor concern, although repository activity provides some compensating evidence.
The repository is owned by an individual user rather than an organization, so there is no organizational maintenance backing to offset the concentrated contributor and maintainer base.
The package is young at 34 days and has nine releases, with a median release interval of 0 days; this demonstrates active iteration but provides limited evidence of long-term maintenance stability.
All 11 recent commits were made by one contributor, giving the project a complete recent contributor concentration and increasing abandonment or handoff risk.
There is one newly opened issue and no issues closed in the last month, while one pull request was merged; this shows some activity but limited evidence of responsive issue maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
php-stubs/wordpress-stubs Version ^5.3 || ^6.0 || ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.