pronamic/wp-datetime

Lifecycle scriptscaution

Composer install, update, and autoload lifecycle scripts execute package-defined behavior during dependency operations. This is a supply-chain exposure and warrants review even though it is not evidence of maliciousness.

Release historycaution

The package has existed since 2018 with 22 releases, but only one release in the last 12 months. The latest release is recent, so this indicates a modest rather than absent release cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This conflicts with the recent release and makes ongoing maintenance capacity less certain.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no published security policy, leaving the process for reporting and handling vulnerabilities unclear.