sediment/analyzer
A static analyzer that reads a WordPress plugin's source code and reports exactly what it leaves behind in your database.
70%
Total Score
caution
Active but very young, single-contributor project with all 28 GitHub Actions references unpinned.
Health Score Breakdown
The package is only 71 days old but has 14 releases, including 14 in the last 12 months; this shows active early development, though long-term maintenance is not yet established.
All 73 recent commits came from one contributor, leaving maintenance highly dependent on a single person and increasing continuity risk.
All six workflows were analyzed with no untrusted checkouts, script injection, or audit findings, but all 28 action references are unpinned and two workflows grant top-level write access; these are meaningful workflow-hygiene weaknesses without an observed exploit path.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Mahmoud Ashraf |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/console Version ^7.0 | — | — |
symfony/process Version ^7.0 | — | — |
nikic/php-parser Version ^5.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 2 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.