The repository includes tests and a changelog, and the release has a clear MIT license. Its small audience and absent security policy leave less evidence for long-term support.
62%
Total Score
67
100
83
50
post-install-cmd and post-update-cmd scripts run during dependency operations, adding execution surface that consumers must trust beyond ordinary file installation.
The repository is owned by an individual rather than an organization, so there is no demonstrated organizational capacity to transfer maintenance if the sole contributor stops.
This is the first and only release, published 53 days ago, so there is not yet enough release history to demonstrate sustained maintenance.
One contributor made all 9 commits in the last 3 months, leaving maintenance highly dependent on a single individual.
The repository has 0 stars and 0 forks, so there is little external adoption evidence; its recent activity and young age partly offset this weak supporting signal.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
php-stubs/wordpress-stubs Version ^5.3 || ^6.0 | — | — |
php-stubs/woocommerce-stubs Version dev-master | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.