trema/wordpress

Dependency profilecaution

The installer declares 10 runtime dependencies, including WordPress, WP-CLI, plugins, and a theme. This is expected for a WordPress project template but creates substantial dependency and update surface for adopters.

Release historycaution

The package has had no release in about 3 years and 6 months, with all 6 releases clustered in March 2023. That long gap materially lowers confidence in maintenance for a deployment package.

Repo commit activitycaution

The repository had 0 commits and 0 active maintainers during the last 3 months. Combined with the release gap, this is meaningful evidence of currently inactive maintenance.

Repo toolingcaution

The project uses Composer, appropriate for this package, but no security-scanning tools were detected. That leaves an oversight gap for a deployment template with many runtime dependencies.

Security policycaution

The repository has no security policy. This is a transparency and response-process gap, though it is not by itself evidence that the package is unsafe.