wp-api/api-core

It has a clear GPL license, tests, a README, and organization backing. The missing security policy and absent security scanning add modest transparency concerns; no deprecation or install scripts reduce immediate concerns.

Latest 2.0-beta7

Packagist

32%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no release in nearly 11 years, with only five releases and none in the last 12 months. This is strong evidence of abandonment for a dependency.

Repo commit activity

The repository had zero commits and zero active maintainers in the last three months. Combined with its last push being nearly 11 years ago, this indicates no current maintenance capacity.

Repo issue activity

There are no open issues or pull requests and no recent issue or pull-request activity. This is consistent with a dormant project, though it does not independently show unresolved maintenance problems.

Repo tooling

The repository uses Composer build tooling, but no security scanning tools were detected. The missing scanning is a modest hygiene gap, not evidence that the release is unsafe.

Security policy

The repository has no security policy. This reduces transparency for reporting and handling vulnerabilities, especially for a package intended as infrastructure, but it is secondary to the maintenance concerns.