wp-media/rocket-lazy-load
Tests, release notes, and an organization-owned repository provide useful support. Recent activity is sparse, every workflow action is unpinned, and the declared GPL-2.0+ conflicts with the detected GPL-3.0 license.
66%
Total Score
67
100
81
75
Health Score Breakdown
The artifact includes a license and the repository also has one, but the manifest declares GPL-2.0+ while the detected license is GPL-3.0, creating a material licensing ambiguity.
Install and update lifecycle scripts are present, which adds execution during dependency operations, but this signal alone does not show unsafe behavior or excessive scope.
The package has existed since January 2019 with 36 releases, but only one release appeared in the last 12 months, indicating slower recent delivery.
The repository recorded zero commits and zero active maintainers in the last three months, a meaningful sign of currently sparse maintenance despite a recent push being recorded elsewhere.
There are 27 open issues but no new or closed issues, pull requests, or merges in the last month, suggesting limited current issue-management activity.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 WP Media |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 composer/installers Version ^1.0 || ^2.0 | — | — |
wp-media/apply-filters-typed Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 11 months ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.