The package is a small static theme with a matching source repository, README, clear licensing, and no install-time scripts. Its last release and repository push were in January 2016, with no recent commits or security policy, so future compatibility and maintenance are uncertain.
45%
Total Score
75
100
75
75
The package has only 3 releases, and its latest release was about 10 years ago; there have been no releases in the last 12 months. This is strong evidence of abandonment risk for a dependency.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the release history showing no activity since January 2016. The package may remain usable as a static theme, but ongoing maintenance is unlikely.
The linked repository has no security policy. This is a transparency gap, although the package is a static theme and has no reported install-time scripts to increase the concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
spress/spress-installer Version 2.0.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.