A comprehensive WordPress environment management utility with Docker detection, typed getters, and secure configuration handling
62%
Total Score
caution
Usable with caveats: no commits in 3 months and weak GitHub Actions pinning reduce maintenance confidence.
The package is 390 days old with 8 releases, but only 1 release appeared in the last 12 months. The recent v2.2.4 release shows the project is not abandoned, though its ongoing cadence is limited.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, which is a meaningful maintenance concern for a package released within the past year.
20 of 21 action uses are unpinned, and the audit found one high-confidence bot-conditions issue in auto-merge.yml. There were no untrusted checkouts or script-injection findings, so this is a hygiene concern rather than a severe release risk.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.