45%
Total Score
unhealthy
Risky: no commits or releases in over a year, and the latest version remains a beta.
The package has made no release in the last 12 months, despite reaching its latest release after a short initial cadence. This is a meaningful abandonment concern.
The repository had zero commits and zero active maintainers in the last three months, providing no evidence of ongoing maintenance.
There are no open issues or pull requests and no recent issue or pull-request activity. This is consistent with a quiet project but does not establish active maintenance.
The repository name does not match the package name, and no README package mention was available. That creates some uncertainty about the source-package relationship, although a subpackage or naming variation is possible.
The repository has no stars or forks and only two watchers. This offers little supporting evidence of maturity, though popularity alone is not decisive.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
x-wp/updater Version ^3.0 | — | — |
surecart/client Version ^1.0 | — | — |
x-wp/admin-notice-manager Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.