page-carbajal/wpexpress

The README and changelog give consumers useful project context, and the linked repository clearly matches the package. The license file conflicts with the manifest declaration, so licensing needs resolution before adoption.

Latest 2.0.7

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 24 releases but none in the last 12 months, with the latest release nearly four years ago. This strongly indicates abandonment risk despite its established history.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and suggesting no current maintenance capacity.

License

A GPL3 manifest declaration is paired with an Apache-2.0 license file, while a repository license file is also present. The package is licensed, but the conflicting declarations require clarification.

Repo tooling

Composer is used for builds, but no security-scanning tooling is present. This is a modest transparency and maintenance gap rather than a standalone severe risk.

Security policy

The repository has no security policy, leaving vulnerability-reporting expectations unclear. This adds a modest transparency gap alongside the broader maintenance concerns.