wp-spaghetti/wp-vite
A powerful Vite integration service for WordPress with Docker support, obfuscated assets handling, cache busting, and comprehensive logging
58%
Total Score
caution
Usable with caveats: about a year without a registry release and a high-confidence workflow audit issue lower confidence.
Health Score Breakdown
There have been no releases in roughly the last year, despite seven releases overall; this is a meaningful maintenance concern for a package intended to integrate with an evolving frontend toolchain.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the concern raised by the long gap since the latest registry release.
There are three open pull requests but no new or merged pull requests in the last month, suggesting pending work without recent throughput.
The audit analyzed all six workflows and found no untrusted checkout or script-injection path, but it identified a high-confidence bot-conditions issue and 20 of 21 action references are unpinned; the latter weakens build reproducibility.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Frugan |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 wp-spaghetti/wp-env Version ^2.0 | — | — |
wp-spaghetti/wp-logger Version ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.