whitespace-se/wordpress-bundle
Its MIT license, readable package documentation, and Composer build tooling provide basic transparency. The organization-owned project is not archived, but its single publisher, broad 21-package runtime dependency set, and absent security policy add maintenance and oversight concerns.
42%
Total Score
75
50
81
75
Health Score Breakdown
The package declares 21 runtime dependencies, including many WordPress plugins, creating a substantial update and compatibility burden for a package with no recent releases.
The latest release was over 5 years ago, with no releases in the last 12 months; this is strong evidence that maintenance has stopped.
The repository recorded zero commits and zero active maintainers in the last 3 months, reinforcing the long release gap and increasing abandonment risk.
There were no new or closed issues or pull requests in the last month, consistent with the lack of recent development activity.
The linked repository name does not match the package name and its README does not mention this package, so the ownership relationship is not transparent despite the repository being under an organization.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Whitespace Dev |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 oscarotero/env Version ^2.1 | — | — |
roots/wp-config Version 1.0.0 | — | — |
vlucas/phpdotenv Version ^5.2 | — | — |
composer/installers Version ^1.8 | — | — |
roots/bedrock-autoloader Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.