wp-media/rocket-lazyload-common
The source includes tests, release notes, clear package ownership, and automated security scanning. Recent development has paused, and all 15 workflow actions are unpinned; the missing security policy adds a smaller transparency concern.
68%
Total Score
67
100
94
75
Health Score Breakdown
The package has 66 releases over about 7 years, but only 1 release in the last 12 months, indicating a currently slow release pace despite substantial history.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, a meaningful sign of recently paused development despite the recent release.
There are no open issues and five open pull requests, though no pull requests were merged in the last month; this provides some activity evidence but not a strong current-maintenance signal.
The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.
All 6 workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 15 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 WP Media |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 wp-media/apply-filters-typed Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 11 months ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.