Package Health/publishpress/wordpress-reviews

publishpress/wordpress-reviews

This release appears generally safe to depend on from a maintenance and transparency perspective: it has a nearly five-year release history, a current stable version, recent releases, an active non-archived repository, organization backing, repository tests and changelog coverage, and no install-time lifecycle scripts. The main concerns are very concentrated recent commit activity, limited repository popularity, absent security-policy and security-scanning evidence, and a workflow with top-level write permissions. These lower the score but do not outweigh the evidence of ongoing releases and active project ownership.

Latest 1.2.2

Packagist

78%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Repo bus factor

All recent commits came from one contributor, creating a concentrated short-term bus factor. Organization ownership provides some capacity for handoff, so this is a caution rather than a severe risk.

Repo commit activity

Only 1 commit was recorded in the last 3 months from 1 active maintainer, indicating limited recent implementation activity. Recent releases and merged pull requests provide some compensation, but the commit pace remains a maintenance concern.

Repo popularity

The repository has 0 stars, 0 forks, and 1 watcher. Low popularity is only supporting evidence and does not outweigh the observed release and maintenance activity, but it provides little external validation.

Repo tooling

The repository uses Composer build tooling, but no security-scanning tools were detected. The build setup is positive, while the missing security tooling modestly reduces transparency and assurance.

Security policy

No security policy was found in the repository, leaving vulnerability-reporting expectations and response procedures unclear.