wpextend/wpe-google-sign-in

Licensedanger

The manifest calls the package proprietary, with no detected license and no license file in either the package or repository. This creates a material adoption and redistribution risk for an open-source dependency.

Release historydanger

The package has had no releases in the last three years, with its latest release on June 30, 2023. That long gap is strong evidence of slowing maintenance for a library dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the absence of recent release activity rather than compensating for it.

Package scaffoldingcaution

The artifact has no README, tests, or changelog. Missing tests and changelog are normal for a published artifact, but the absent README is a transparency and integration gap for a PHP library.

Repo toolingcaution

The repository uses Composer build tooling, appropriate for a Packagist package, but has no security-scanning tooling. The missing scanning is a minor transparency gap rather than a severe risk on its own.