roots/wordpress-core-installer
The release is licensed, backed by the Roots organization, tested in the repository, and documented by version-specific release notes. Its sparse release cadence, absent recent commits, missing security policy, and unpinned workflow actions warrant maintenance and build-integrity caution.
68%
Total Score
75
100
88
50
Health Score Breakdown
The package has existed for about 7 years and has a recent release, but only 6 releases overall and a median interval of about 302 days indicate a deliberately slow maintenance cadence.
The repository recorded zero commits and zero active maintainers in the last 3 months, indicating thin recent development activity, although the current release provides some compensating evidence.
There are no open issues or pull requests, but there was also no issue or pull-request activity in the last month; this is neutral to mildly cautionary rather than evidence of active support.
Composer is used for the build, but no security-scanning tooling is configured, leaving a modest transparency and maintenance gap.
The repository has no security policy, reducing clarity for reporting and handling vulnerabilities in a package intended for dependency use.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 John P. Bloch |
| Roots |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 6 months ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.