Package Health

pop-sites-wassup/wassup

The package is documented, licensed, and its repository includes tests and a changelog. Its large dependency surface and lack of a security policy add maintenance overhead; pin this version if the older PoP stack is required.

Latest 0.7.13PackagistPackagist

52%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

80

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historydanger

The latest release was published in February 2021, with no releases in the last 12 months. This long period without releases is a substantial maintenance concern.

Dependency profilecaution

The package declares 57 runtime dependencies, creating a wide maintenance and compatibility surface. This may be expected for a PoP site component, but it still increases reliance on the surrounding stack.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's prolonged release inactivity. The repository is not archived, which prevents this from being an abandonment verdict on its own.

Security policycaution

The linked repository has no security policy. For a package exposing site and mutation functionality, this reduces transparency around reporting and handling security issues.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Leonardo Losoviz

Direct Dependencies

DependencyLast ReleaseScore
getpop/spa
Version ^0.7.13
—
—
getpop/site-wp
Version ^0.7.13
—
—
getpop/api-rest
Version ^0.7.13
—
—
getpop/trace-tools
Version ^0.7.13
—
—
pop-schema/menus-wp
Version ^0.7.13
—
—

Weekly Downloads

Info

Last Published
5 years ago
Created
5 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform