wp-cli/package-command
Clear documentation, a recent GitHub release, and active repository work make this a mature dependency. Composer tooling, Dependabot, a security policy, and an organization-backed project add useful safeguards; workflow pinning is the main remaining hygiene concern.
91%
Total Score
100
100
100
75
Health Score Breakdown
All 8 workflows were analyzed with no audit findings, no untrusted checkouts, and no script injection. However, 7 of 11 action references are unpinned and 5 workflows grant top-level write access, leaving a minor workflow-hygiene concern without a demonstrated exploit path.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Daniel Bachhuber |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 wp-cli/wp-cli Version ^3.0 | — | — |
composer/composer Version ^2.10.2 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.