Package Health

wp-launchpad/bus

The source is small but includes tests, a stable release, and an organization-owned repository. Licensing is declared, though the repository’s GPL-2.0 text should be checked against the manifest’s GPL-2.0-or-later terms.

Latest v3.1.0PackagistPackagist

58%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

79

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Licensecaution

The manifest declares GPL-2.0-or-later and the repository contains a GPL-2.0 license file, so the release is licensed. The narrower detected text does not clearly cover the manifest’s later-version option and merits verification.

Release historycaution

The package has made no release in the last 12 months, and its latest release was about 21 months ago. The five-release history and roughly 35-day median interval show earlier activity but do not offset the current pause.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, reinforcing the concern that maintenance has stopped.

Repo popularitycaution

The repository has zero stars and forks and one watcher. Popularity is only supporting evidence, but these numbers provide little external evidence of active use or review alongside the maintenance pause.

Security policycaution

The linked repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a transparency gap, though it is less severe than the inactivity evidence.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

CrochetFeve0251

Direct Dependencies

DependencyLast ReleaseScore
league/tactician
Version ^1.1
—
—
wp-launchpad/core
Version ^3.1
—
—

Weekly Downloads

Info

Last Published
1 year ago
Created
2 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform