wpextend/wpe-banner-notification

Release historydanger

The latest release was published in March 2020, and there have been no releases in more than six years. Four releases over that period provide little evidence of ongoing maintenance.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the past three months, consistent with the release history showing no updates since March 2020.

Licensecaution

The package declares a proprietary license and has no detected license file in the package or repository. That limits transparency and may restrict safe adoption in projects expecting open-source licensing.

Repo package mentioncaution

The repository name matches the package, reducing the risk of an unrelated source repository, but its README does not mention the package. This weakens the connection between the published package and its source documentation.

Repo toolingcaution

Composer is used for the build, which is appropriate, but no security-scanning tooling is present. This is a modest transparency and maintenance concern rather than evidence of a specific vulnerability.