weboftalent/stafftheme

The package is small, explicitly licensed, and has only two runtime dependencies; its repository is also still available rather than archived. Missing security policy and scanning reduce transparency, and the minimal repository identity makes long-term support harder to verify.

Latest 1.0.0

Packagist

42%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

This is the only release, published in May 2018, with no releases in the last 12 months. More than eight years without another release is strong evidence of abandonment risk, even for a small theme package.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no activity since 2018. The repository is not archived, but that does not compensate for the prolonged inactivity.

Repo package mention

The linked repository name does not match the package name, and no README package mention was collected. This makes package ownership and source-to-artifact correspondence harder to verify.

Repo tooling

Composer is used as the build tool, but no security-scanning tooling is present. This is a modest transparency and maintenance gap rather than evidence of unsafe behavior on its own.

Security policy

The repository has no security policy. For a small, long-inactive package this leaves no clear path for reporting or handling vulnerabilities.