seravo/wordpress
A clear README, GPL licensing, stable releases, and organization backing improve adoption confidence. The workflows have no detected dangerous findings, but their three action references are unpinned and the repository has no security policy.
65%
Total Score
63
94
50
Health Score Breakdown
The package runs post-install-cmd and post-update-cmd scripts, increasing installation complexity and the amount of package code executed during dependency operations.
All recent commit activity came from one contributor. Organization ownership provides some handoff capacity, but no second active contributor is shown in this period.
Only 1 commit was recorded in the last three months, indicating thin recent maintenance activity despite the recent registry releases.
There were no new issues or closed issues in the last month, although one pull request was merged; this suggests limited recent project interaction.
Composer build tooling is present, but no security scanning tools were detected, leaving security automation coverage unclear.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 vlucas/phpdotenv Version ^5.0 | — | — |
composer/installers Version ^1.0 | — | — |
seravo/seravo-plugin Version * | — | — |
roots/bedrock-autoloader Version ^1.0 | — | — |
johnpbloch/wordpress-core Version ^6.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 months ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.