Package Health

nitishkaila/wp-vip-pre-commit-hook

The package has explicit Composer dependencies, a matching repository, and a readable README with release notes. Its GPL-3.0 declaration improves clarity, but the absence of security scanning or a security policy leaves less evidence for safe upkeep.

Latest 1.0.0PackagistPackagist

40%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

25

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

83

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. That is strong evidence that maintenance has stopped, even though the repository is not formally archived.

Project backingcaution

The package and repository are owned by the same individual account, providing consistent ownership context. Individual ownership does not establish a broad maintenance team, so it does not offset the lack of recent activity.

Release historycaution

This package has one release, published over seven years ago, with no releases in the last 12 months. A tiny, stable package can need few releases, but this long silence raises abandonment and compatibility concerns.

Repo toolingcaution

Composer is used as the build tool, which fits the package ecosystem. However, no security scanning tools are present, leaving a modest verification gap alongside the long maintenance silence.

Security policycaution

The repository has no documented security policy. For a package that installs coding tools and a commit hook, this reduces transparency about reporting and handling dependency or release issues.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Nitish Kaila

Direct Dependencies

DependencyLast ReleaseScore
automattic/vipwpcs
Version *
—
—
wp-coding-standards/wpcs
Version 1.*
—
—
phpcompatibility/phpcompatibility-wp
Version *
—
—
dealerdirect/phpcodesniffer-composer-installer
Version *
—
—

Weekly Downloads

Info

Last Published
7 years ago
Created
7 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform