Create empty wordpress theme with minimal developper kit
58%
Total Score
83
100
85
67
A post-install command runs during installation, adding execution during dependency setup. The signal does not show that it is harmful, but it warrants modest supply-chain caution.
The package has 61 releases over roughly 12 years, but none in the last 12 months; its latest release was about 2 years and 6 months ago. This indicates a meaningful maintenance slowdown.
The package has 61 releases over roughly 12 years, but none in the last 12 months; its latest release was about 2 years and 6 months ago. This indicates a meaningful maintenance slowdown.
There were no commits and no active maintainers in the last 3 months, consistent with the last repository push being about 2 years and 6 months ago. This raises abandonment and future-support risk.
Composer build tooling is present, but no security-scanning tool was detected. For a package with install and build behavior, this leaves a modest transparency gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
respect/validation Version ~2.2 | — | — |
mobiledetect/mobiledetectlib Version ^2.8 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.