CRA Vuln Notify vs Patchstack

Head-to-head on the signals that matter, from the public WordPress.org data.

CRA Vuln Notify

by macroncode

Health B80

Patchstack

by Patchstack

Health A90

Active-install trajectory

CRA Vuln NotifyPatchstack

Active installs, each indexed to 100 at the start of the window. A line above 100 is growing its install base, below 100 is shrinking.

Metric	CRA Vuln Notify	Patchstack
Active installs Modeled from the public "N+" band and recent downloads.	20–30	60K–70K ✓
Install trend Change in active installs across the charted window.	0%	+50% ✓
Overall health	—	A · 90 ✓
Maintenance How recently the plugin was updated.	100/100	100/100
Rating quality Volume-adjusted review quality.	—	93/100 ✓
Support Share of forum threads marked resolved.	—	70/100 ✓
Rating (adjusted)	—	4.70★ ✓
Reviews	0	61 ✓
Ranking optimization How well the listing is tuned to rank on wp.org.	88/100 ✓	83/100
Removal risk Maintenance signals that precede a wp.org closure. Not an official status.	Low	Low
Last updated	22d ago ✓	2mo ago
Downloads · 30d	116	23.0K ✓
Install conversion Active installs over lifetime downloads. Downloads include every update, so older and more frequently released plugins read lower.	18% ✓	8.4%
Category	Security	Security

✓ marks the stronger plugin on each row. Rows where they're level show no marker.

Release activity

CRA Vuln NotifyPatchstack

7-day average daily downloads. Downloads spike for about a week after each release as the install base re-downloads, so read this as release cadence, not growth.