wpelevator/update-pilot

Usable with caveats: it is actively released and backed by an unarchived organization repository, but all recent commits come from one contributor and the project has no security policy or scanning. Review its install scripts before adopting it.

Latest 0.9.1

Packagist

72%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Lifecycle scripts

The package defines post-install and post-update Composer scripts. These are not inherently unsafe, but they add install-time behavior that should be reviewed before allowing automated dependency installation.

Repo bus factor

One contributor made all 6 commits in the last 3 months, creating a genuine continuity risk. Organization backing provides some capacity for handoff, but no second active contributor is shown.

Repo issue activity

No new or closed issues or pull requests were recorded in the last month, while the total issue and pull-request counts are unavailable. This provides little evidence of community support but does not establish abandonment.

Repo popularity

The repository has 3 stars, 0 forks, and 1 watcher. This indicates limited adoption, but popularity is supporting evidence only and does not outweigh the active release history and recent commits.

Repo tooling

Composer is used for builds, but no security scanning tool is configured. The build tooling is appropriate, while the missing automated security checks reduce assurance.