Skip to content
PluginCanary
Limited data: this plugin has under 1,000 active installs and less than 12 weeks of history with us, so we show signals but no status band yet.

WP Composer

by Sean Fisher · 70+ active installs · Checked 4 Nov 2026
Limited data1 Critical1 Warning

Limited data: WP Composer has under 1,000 active installs and less than 12 weeks of history, so we do not rate it yet.

59/ 100Limited data
Canary Score

Based on 3 of 5 areas

Capped at 59: a Critical signal is open.

Sub-scores for WP Composer
Ownership100
Maintenance0
Security100
SupportNo data
ReputationNo data

How the score works

Active signals

Open issues right now, with links to the source.

  • CriticalMNT-1No release in 162 months (last release 15 Jul 2013). Plan a replacement if the plugin is important to your site.15 Jul 2014Evidence
  • WarningMNT-2Tested up to WordPress 3.5.2, 36 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence

Quick answers

Is WP Composer still maintained?
No. Last release 15 Jul 2013, over 13 years ago. 15 Jul 2013 · wordpress.org
Who owns WP Composer, and has it changed hands?
No change recorded. 4 Nov 2026 · SVN log
Was WP Composer removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is WP Composer safe?
No known vulnerabilities on record. 4 Nov 2026 · Wordfence Intelligence
Is the latest WP Composer update safe to install?
No ownership change before 0.1.2. No one-star spike after it. 15 Jul 2013 · Release history

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

No ownership changes recorded since 2013.

Maintenance

Last release
13 years ago
Releases, 24 months
0
Tested up to
3.5 vs 7.1
Requires PHP
not stated supported 8.2+
Releases per quarter
Releases per quarter for WP Composer
Q1 20240
Q2 20240
Q3 20240
Q4 20240
Q1 20250
Q2 20250
Q3 20250
Q4 20250
Q1 20260
Q2 20260
Q3 20260
Q4 20260

Last release 15 Jul 2013. Tested up to 3.5, 36 major versions behind WordPress 7.1.

Support

Resolved, last 2 months
n/a
Threads, last 2 months
0

Trend appears after 8 weekly snapshots.

Security record

No published vulnerabilities on record for this plugin.

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Reputation

Last 90 days: no reviews. Lifetime: 5.0.

Last 90 days vs lifetime average rating for WP Composer
Last 90 daysNo reviews
Lifetime5.0
Rating distribution
5 star2
4 star0
3 star0
2 star0
1 star0

Momentum

Active installs
70+

Trend appears after 8 weekly snapshots.

Facts

Version
0.1.2
Author
Sean Fisher
Added
10 Jun 2013
Last updated
15 Jul 2013
Active installs
70+
Requires WordPress
3.3
Tested up to
3.5.2
Requires PHP
not stated
Category
not stated
Tags
php, wp-cli, composer, dependency, command line

Other plugins by this author: Lockdown WP Admin, REST API Guard, Enable Site Ping WPMU, Network Ping

Questions about WP Composer

Is WP Composer still maintained?

No. Last release 15 Jul 2013, over 13 years ago.

Who owns WP Composer, and has it changed hands?

No change recorded.

Was WP Composer removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is WP Composer safe?

No known vulnerabilities on record.

Is the latest WP Composer update safe to install?

No ownership change before 0.1.2. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue