stellarwp/uplink

Licensecaution

The artifact includes license files and the repository also has one, but the manifest declares GPL-2.0-or-later while the detected artifact license is GPL-3.0. The mismatch should be resolved before relying on the stated licensing terms.

Release historycaution

The package has 34 releases over roughly 3 years, but none in the last 12 months despite a historically short median interval of about 5 days. This is a meaningful maintenance slowdown.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. Combined with no registry releases in the last year, this points to stalled maintenance.

Repo toolingcaution

The project uses Composer, but no security-scanning tools were detected. This is a modest transparency and maintenance gap, not evidence that the package is unsafe.

Security policycaution

The repository has no security policy file, leaving vulnerability reporting and response expectations undocumented. Organization backing and active project structure provide only partial context, not a substitute for a published process.