Composer plugin to easily build WordPress websites entirely managed via Composer.
62%
Total Score
caution
Usable with caveats: three months without commits and entirely unpinned workflow actions hold back an otherwise established project.
The repository recorded zero commits and zero active maintainers in the last three months, a concrete sign that maintenance has slowed despite the recent release and push evidence.
There are only two open issues and two open pull requests, but none were opened, closed, merged, or otherwise active in the last month; this is a mild maintenance concern.
The repository has no security policy, which reduces disclosure transparency for a package that integrates with WordPress and Composer.
This release is a prerelease and recent releases are 75% prereleases, while a stable 3.0.1 exists; consumers should expect some API or behavior change risk when choosing this beta.
The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but all nine action references are unpinned, leaving the build exposed to mutable action changes.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/dotenv Version ^3.4 | — | — |
composer/installers Version ^1.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.