waughj/wp-get-image-sizes

Release historydanger

The package has had no releases in more than seven years and only three releases overall, which is a meaningful maintenance concern for a dependency.

Repo popularitycaution

The repository has zero stars, forks, and watchers, so there is little visible community support to compensate for the inactive release history.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tooling is present; this is a modest transparency gap rather than a severe risk for this small package.

Repository archivedcaution

The repository is not archived, which preserves the possibility of future maintenance, but its last push in May 2019 is consistent with the long release gap.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented, although the package has no reported active security issue in the provided signals.