waughj/wp-media-sizes

Release historydanger

The package has only two releases, with the latest published in April 2020 and none in the last six years. This is meaningful abandonment risk for a dependency, despite the package's small and focused scope.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with no release activity since April 2020. This substantially increases the risk that issues or platform changes will go unattended.

Project backingcaution

The repository is owned by an individual account rather than an organization, so continued maintenance depends on a narrow ownership base. The matching repository and focused package provide some compensating transparency.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. For this small package this is a hygiene gap rather than evidence that the release is unsafe.

Version stabilitycaution

Version 0.2.0 is not a prerelease, which gives the assessed release a stable version label, but the package remains below 1.0 and has not advanced since 2020.