The project has active recent commits, regular releases, a clear license, and organization backing. Workflow permissions are broad in several files and 7 of 11 actions are unpinned, while recent work is concentrated in one contributor; these are manageable maintenance and build-hygiene concerns.
88%
Total Score
83
100
100
83
One contributor made 13 of 14 recent commits, so activity is highly concentrated; the second active contributor and organization ownership partly compensate, but succession risk remains.
All 8 workflows were analyzed with no audit findings or untrusted checkouts, but 7 of 11 action references are unpinned and 5 workflows grant top-level write permissions. These are build-reproducibility and permission-hygiene cautions, not severe risks because no untrusted sink was found.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
wp-cli/wp-cli Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.