wp-cli/widget-command
The project has recent releases, active commits, security scanning, and organization backing. One contributor made 10 of 11 recent commits, while 7 of 11 workflow actions are unpinned and five workflows grant broad write access.
84%
Total Score
88
100
100
88
Health Score Breakdown
One contributor made 10 of 11 recent commits, creating a concentrated maintenance base. A second active contributor and organization backing reduce, but do not eliminate, the handoff risk.
All eight workflows were analyzed with no audit findings, and pull-request-target workflows have no untrusted checkouts or script injection. However, 7 of 11 action references are unpinned and five workflows have top-level write permissions, leaving avoidable workflow supply-chain and token-scope exposure.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Daniel Bachhuber |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 wp-cli/wp-cli Version ^3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.