stellarwp/harbor
A library that integrates a WordPress product with the Liquid Web licensing system.
78%
Total Score
healthy
Active releases and a broad contributor base outweigh workflow pinning and license-metadata gaps.
Health Score Breakdown
The artifact declares GPL-2.0-or-later and includes license files, but detected license text is GPL-3.0, creating a material metadata mismatch that should be clarified.
Composer build tooling is present, but no security-scanning tooling was observed; this is a modest repository hygiene gap rather than an abandonment concern.
The repository has no security policy, reducing transparency for reporting and handling vulnerabilities.
All 45 analyzed action references are unpinned, and high-confidence template-injection findings occur in release workflows. Because no pull_request_target, workflow_run, untrusted checkout, or script-injection paths were observed, this is workflow hygiene risk rather than a severe supply-chain signal.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Liquid Web |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 nyholm/psr7 Version ^1.0 | — | — |
psr/http-client Version ^1.0 | — | — |
psr/http-factory Version ^1.0 | — | — |
psr/http-message Version ^1.1 | — | — |
stellarwp/container-contract Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 20 hours ago
- Created
- 6 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.