Healthy and actively maintained, with a clear source repository, frequent releases, and solid package documentation. The main caveat is that recent commits come from one contributor and the repository lacks a security policy and security-scanning tools.
78%
Total Score
67
50
94
75
The package declares 21 runtime dependencies, including many Meta Box modules and integrations. That breadth fits a WordPress plugin bundling substantial functionality but increases maintenance and update surface.
One contributor made 100% of the 9 recent commits. Organization backing provides some handoff capacity, but the observed maintenance base is still concentrated.
The repository recorded 9 commits in the last 3 months, showing recent activity, but all activity came from only one active maintainer.
Composer build tooling is present, but no security-scanning tools were detected. The build process is established while automated security coverage is not evident.
No repository security policy was found, leaving vulnerability-reporting and response expectations undocumented.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
elightup/twig Version ^3 | — | — |
wpmetabox/support Version ^1 | — | — |
wpmetabox/meta-box Version ^5 | — | — |
composer/installers Version ^2 | — | — |
wpmetabox/mbb-parser Version ^2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.