wcm/avatar

Risky to adopt: the package has seen no release activity for nearly 11 years and no repository commits for nearly 10 years, with 17 open issues still unresolved. It is not deprecated or archived and has a clear license and repository, but the long-standing inactivity makes maintenance and compatibility a serious liability.

Latest 0.3.6

Packagist

38%

Total Score

Maintainer Stability

Dependencies

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published in October 2015, and there have been no releases in the last 12 months. This long release gap is strong evidence of abandonment risk for a package used in a WordPress project.

Repo commit activity

There were zero commits and zero active maintainers in the last three months, consistent with almost a decade since the last recorded repository push. This is the strongest evidence that bug fixes and compatibility updates are unlikely.

Dependency profile

The package declares four runtime dependencies, including PHP and Composer-related tooling. This is not unusually broad, but old dependencies can increase compatibility risk when the package itself has not been updated for years.

Maintainers

Only one registry account has publish access, which is a narrow publishing base. The organization-backed repository provides some continuity, so this is a modest concern rather than a severe one.

Repo issue activity

The repository has 17 open issues and one open pull request, with no issues or pull requests closed in the last month. Combined with the package's age, this indicates unresolved maintenance demand.