The repository has tests, a matching README, and documented release notes, while organizational ownership provides some continuity. The license mismatch and prolonged inactivity make long-term use a maintenance and legal review decision.
52%
Total Score
75
80
75
The manifest declares a proprietary license, while the repository license file is recognized as GPL-2.0. This unresolved mismatch creates a meaningful legal and transparency concern.
The package has had no registry release in over two years, despite nine total releases, indicating that maintenance has stopped for a substantial period.
The repository recorded zero commits and zero active maintainers in the last three months; together with the old latest release, this indicates inactive development.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a hygiene gap, not evidence of unsafe code by itself.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
wp-launchpad/core Version ^0.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.