Wordless Framework.
62%
Total Score
caution
No repository commits in three months despite only three releases in the past year, with a small user and contributor base.
The package declares 44 runtime dependencies, including many PHP extensions and WordPress tooling, which increases integration and maintenance complexity.
A post-autoload-dump install-time script runs during Composer operations, adding execution behavior that consumers should account for, though this is not severe on its own.
The project has existed for about 5 years and released 372 versions, but only 3 releases occurred in the last 12 months, indicating a slower current cadence.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, a meaningful maintenance warning despite the package's recent registry release.
The repository has 5 stars, 0 forks, and 1 watcher, providing little supporting evidence of a broad user or contributor base.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
league/csv Version ^9.16 | — | — |
ramsey/uuid Version ^4.7 | — | — |
lcobucci/jwt Version ^5.2 | — | — |
nesbot/carbon Version ^3.9 | — | — |
wp-cli/wp-cli Version ^2.12 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.