A headless WordPress CMS for developers sick of WordPress
58%
Total Score
caution
No releases in 12 months and no commits in 3 months point to slowing maintenance despite a mature, documented project.
The package runs post-autoload-dump and post-create-project-cmd scripts during Composer operations; these are relevant install-time behavior and add some operational review burden.
Only one registry account has publishing access, so continuity depends heavily on one person; the linked repository is also owned by an individual rather than an organization.
The registry namespace and repository owner match, and both are tied to the same individual account; this supports ownership continuity but offers no organizational backing.
The package has 109 releases over about 5 years, but none in the last 12 months; this suggests maintenance has recently slowed despite a strong historical cadence.
The repository recorded zero commits and zero active maintainers in the last 3 months, which is the clearest sign that current maintenance has slowed.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
roots/wordpress Version ~6.8.2 | — | — |
composer/installers Version ^2.1 | — | — |
thbighead/wordless-framework Version ^8.45 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.