It is licensed, documented, and backed by a matching organization-owned repository. The small dependency surface and lack of install scripts reduce adoption risk, but maintenance activity is currently quiet.
69%
Total Score
83
100
88
83
The package has existed for about five years with 24 releases and a median interval of about 56 days, but only one release appeared in the last 12 months, indicating slower recent maintenance.
The repository recorded zero commits and zero active maintainers over the last three months. This is a real maintenance warning, though it is not conclusive abandonment because a release was published about five months earlier.
Composer is used as a build tool, showing basic project tooling, but no security scanning tools were detected. For a small theme this is a modest transparency gap rather than a severe risk.
No repository security policy was found, reducing the project's documented process for handling vulnerabilities.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.