plugin/pdc-leges

This is a mature, actively published WordPress plugin with a release history dating to 2018, 31 releases, a stable current major version, a non-deprecated registry status, clear licensing, tests, changelog, build scaffolding, and organizational repository backing. The main concern is that the linked repository recorded no commits or active maintainers in the last 3 months, which may indicate slowing maintenance despite a release published recently; repository popularity is also limited. Missing security scanning and unspecified workflow token permissions add hygiene concerns, but the repository has a security policy and no detected dangerous workflow patterns. The package appears usable for dependency adoption, with normal diligence around future maintenance recommended.

Latest v2.4.0

Packagist

72%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last 3 months, a material maintenance slowdown. This is partly offset by the recent registry release and recent repository push, but the release itself does not demonstrate sustained ongoing development.

Repo popularity

The repository has 0 stars, 3 forks, and 5 watchers, indicating limited external adoption; this is supporting caution rather than evidence of abandonment on its own.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. The build setup supports reproducibility, while the missing scanning is a security-hygiene gap rather than a direct health failure.

Token permissions

The release workflow lacks top-level token permissions, and no read-only or explicit permission configuration was detected. This weakens CI least-privilege hygiene, although no workflow was found to request top-level write access.