Package Health/varunsridharan/wp-endpoint

varunsridharan/wp-endpoint

The package has clear documentation, an explicit license, and a repository that matches its published contents. Its small, inactive project leaves maintenance and dependency-update risk unresolved.

Latest 1.5

Packagist

58%

Total Score

Maintainer Stability

Maturity

Health Score Breakdown

Maintainers

Only one registry publisher is listed, and the repository is owned by an individual rather than an organization, leaving a thin continuity base.

Release history

The package has made no release in more than 5 years, despite six releases overall; this is a meaningful sign of possible abandonment.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap and limited evidence of ongoing maintenance.

Repo tooling

Composer build tooling is present, but no security-scanning tool was detected; this modestly reduces transparency for a package with no recent activity.

Workflow audit

All 12 analyzed action references are unpinned, which weakens build reproducibility and update safety. The audit found no untrusted checkouts, script injection, or high-severity findings, so this is a hygiene concern rather than a severe risk.