WPEverest sniffs
61%
Total Score
caution
Usable with caveats: no releases in the past year and no recent repository commits.
The package has 7 releases, but all appear to date from about 13 months ago and there were no releases in the last 12 months, which raises maintenance concerns.
The repository recorded no commits and no active maintainers in the last 3 months, reinforcing the concern raised by the stale release history.
The repository has only 3 stars, 0 forks, and 2 watchers. This is limited supporting evidence of maturity, but it is not decisive for a small organization-backed ruleset.
Composer is used for builds, but no security-scanning tools were detected. That is a modest transparency and maintenance gap rather than a severe risk.
The repository has no security policy. For a small static-analysis ruleset this is a minor transparency gap, not evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
wp-coding-standards/wpcs Version >=2.3 | — | — |
phpcompatibility/phpcompatibility-wp Version >=2.1 | — | — |
dealerdirect/phpcodesniffer-composer-installer Version >=0.7.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.