prospress/action-scheduler
Risky to adopt under this package name because the registry marks the package abandoned and points to woocommerce/action-scheduler. The linked organization-backed repository is active, with a current release, regular commits, and multiple contributors, but new projects should use the replacement package.
40%
Total Score
100
83
75
Health Score Breakdown
The package is marked abandoned at package scope, with woocommerce/action-scheduler named as its replacement. This is a substantial adoption risk even though the underlying project remains active.
The repository uses Composer build tooling, but no security scanning tools were detected. This is a modest transparency gap rather than evidence of abandonment.
No repository security policy was found, leaving vulnerability-reporting guidance unclear. The active organization-backed project partially reduces the practical concern but does not remove the gap.
None of the three workflows declares top-level token permissions, which is weaker workflow hardening. No workflow has top-level write permissions, limiting the risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 14 days ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.