snicco/better-wp-cache

The source includes integration tests, a matching repository, and a clear LGPL license. Composer dependencies and no install scripts keep integration straightforward. The release remains experimental and appears abandoned, so long-term maintenance is a concern.

Latest v2.0.0-beta.9

Packagist

45%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 33 releases since April 2022, but none in the last 12 months; its latest release was about two years ago. The earlier frequent cadence does not compensate for the current halt.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. Combined with no registry releases for about two years, this is strong evidence of stalled maintenance.

Security policy

The repository has no security policy. This weakens vulnerability-reporting transparency, although it is less important than the observed maintenance halt.

Version stability

v2.0.0-beta.9 is explicitly a prerelease, and 45% of recent releases were prereleases. That indicates an experimental API and adds adoption risk.

Workflow audit

The only workflow uses a pull_request_target trigger without an untrusted checkout or script injection, and the audit found no findings. However, its single action reference is unpinned, leaving a modest reproducibility risk.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Calvin Alkan

Direct Dependencies

Dependency	Last Release	Score
psr/cache Version ^1.0.0	—	—
psr/simple-cache Version ^1.0.0	—	—
cache/tag-interop Version ^1.1	—	—
cache/taggable-cache Version 1.2.0	—	—
snicco/better-wp-api Version ^2.0	—	—