A helper package for working with the WordPress Settings
62%
Total Score
caution
Usable with caveats: the MIT/GPL-3.0 license mismatch and single-contributor maintenance reduce confidence.
The manifest declares MIT, while the artifact and repository license file are detected as GPL-3.0. The package is licensed, but the mismatch creates a material adoption and compliance concern.
The repository owner is an individual user account, not an organization. That does not invalidate the package, but it means the single-contributor maintenance signal is not offset by visible organizational backing.
This is a young package, 83 days old, with only two releases and a median interval of about 43 days. That provides limited evidence of long-term maintenance maturity.
One contributor made 100% of the two commits in the last three months. Because the repository is user-owned rather than organization-owned, there is no provided backing signal to compensate for this concentration.
Only two commits were recorded in the last three months, all from one active maintainer. Recent activity exists, but the low volume gives limited evidence of sustained maintenance capacity.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.