The project includes a clear license, tests, changelog, security policy, and automated tooling. Maintenance is concentrated in one publisher, with no commits or issue progress in the last three months. Pin a later stable release if available.
58%
Total Score
38
50
88
83
The repository recorded zero commits and zero active maintainers over the last three months, which is the strongest abandonment concern in the available evidence.
Nine runtime dependencies create some update and compatibility surface, but the profile is not excessive for a WordPress integration package.
Only one registry publisher is listed, which is a limited publishing base for a package with this integration scope.
The repository is owned by an individual rather than an organization, so the single-publisher and thin-maintenance signals are not compensated by visible organizational backing.
All 13 releases appear on the same day, so this release has little demonstrated release history or long-term cadence.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
jelix/inifile Version ^3.3 | — | — |
fakerphp/faker Version ^1.24 | — | — |
wpmetabox/meta-box Version ^5.6 | — | — |
meta-box/meta-box-group Version dev-master | — | — |
meta-box/mb-admin-columns Version dev-master | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.