wpextend/wp-advanced-block-theme

Licensedanger

The manifest declares the package proprietary, with no detected license and no license file in the package or repository. That creates a significant adoption and redistribution concern for an open-source dependency.

Release historydanger

The package has had no releases in the last 12 months, and its latest release was in September 2023 despite being over four years old. This is strong evidence of stalled maintenance.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the stale release history and increasing abandonment risk.

Lifecycle scriptscaution

The package declares post-install and post-update Composer scripts. These scripts deserve review because they execute during dependency operations, although their presence alone does not establish unsafe behavior.

Maintainerscaution

Only one registry account has publishing access. The repository is also owned by an individual, so there is no organizational backing shown to compensate for the thin maintainer base.