Package Health/voceconnect/wp-dependencies

voceconnect/wp-dependencies

The package is clearly documented, licensed, and has a small dependency surface without install-time scripts. No commits or releases have appeared since April 2021, and the repository has no security policy, making long-term maintenance uncertain.

Latest 0.2.1

Packagist

56%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

There were zero commits and zero active maintainers in the last three months, consistent with the repository having stopped changing around April 2021. This is the clearest abandonment concern.

Release history

The latest release was in April 2021, with no releases in the last 12 months. This substantial release gap lowers confidence in ongoing maintenance, though the package is not deprecated.

Repo tooling

The repository uses Composer build tooling, but no security scanning tools were detected. For a small Composer package this is a modest transparency and maintenance gap, not a severe risk.

Security policy

The repository has no security policy. This weakens vulnerability-reporting transparency, though it is less significant than the prolonged lack of maintenance.

Version stability

Version 0.2.1 is a non-prerelease release, so it is not marked unstable. Its pre-1.0 major version still suggests a less mature compatibility promise, but this is a minor concern.