wp-spaghetti/wp-boot
WP Boot is a lightweight Composer-based WordPress management system
61%
Total Score
caution
Usable with caveats: no recent commits and weak workflow pinning reduce confidence in ongoing maintenance.
Health Score Breakdown
Post-install and post-update Composer scripts are present. For a WordPress management package whose documented purpose includes synchronizing files, these scripts fit the package story but still warrant awareness during installation.
No commits and no active maintainers were recorded in the last 3 months. The recent repository push and regular releases partly offset this, but the lack of recent commit activity lowers maintenance confidence.
All nine analyzed action references are unpinned, and the audit reports a high-confidence bot-conditions finding in auto-merge.yml. The pull_request_target workflow has no untrusted checkout or script-injection count, so this is workflow hygiene risk rather than a severe supply-chain finding.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Frugan |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 oscarotero/env Version ^2.1 | — | — |
vlucas/phpdotenv Version ^5.5 | — | — |
composer/installers Version ^2.2 | — | — |
johnpbloch/wordpress Version 6.9.4 | — | — |
inpsyde/wp-translation-downloader Version ^2.6 | — | — |
Weekly Downloads
Info
- Last Published
- 5 months ago
- Created
- 9 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.