sitepilot/theme
The build uses an install-time script and two unpinned actions, while the repository has no security policy. An organization owns the project and the release includes a README and release notes, but these do not offset the maintenance gap.
44%
Total Score
75
80
50
Health Score Breakdown
The latest release was June 2022, with no releases in the last 12 months despite the package being about four years old. This is strong evidence of abandonment risk.
A post-install command runs during installation, adding execution behavior that consumers must trust and review.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the long release hiatus rather than showing ongoing maintenance.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.
The single workflow was fully analyzed with no dangerous sinks or high-severity findings, but both of its two action references are unpinned, weakening build reproducibility.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Nick Jansen |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 sitepilot/wp-theme Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.