wpextend/wp-local-instance

Release historydanger

The package has had no release in more than four years; although it accumulated 30 releases early on, there has been no activity in the last 12 months. This is strong abandonment evidence.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release gap and indicating no current maintenance capacity.

Lifecycle scriptscaution

The post-create-project-cmd script runs during installation, adding execution-time supply-chain exposure. This is expected for a Composer create-project template, but it still warrants caution because the project is stale.

Repo toolingcaution

The repository reports no build tools and no security scanning tools. For a small shell, Docker, and WordPress setup this is not conclusive, but it leaves maintenance and security checks less transparent.

Security policycaution

No security policy was found. This is a transparency gap for a project that includes shell scripts, Docker configuration, and installation automation.