Is this plugin still needed & maintained?

Do you have a problem that needs addressing?

Those “abandon notices” don’t mean insecure, just that the plugin hasn’t been updated.

I agree, not necessarily an issue, and I am myself using some quite old plugins on a number of sites that I manage, if no more actively developed/monitored alternative is available. But many of us get nervous when plugins get marked as ‘possibly abandoned’, and get nagged by WordFence about it. Isn’t it good practice for plugins to be visibly checked for compatibility with latest WordPress and PHP versions, not least for security reasons, in case there are any deprecated functions etc?

and get nagged by WordFence about it

I think you just about summed it up right there… ??

I suggest that you post in Wordfence’s support forum. They do a good job of catching actual bad plugins (see their blog) but that nagging is IMHO less than useful.

Isn’t it good practice for plugins to be visibly checked for compatibility with latest WordPress and PHP version

IMHO, not really. If there’s a problem with a built in WordPress function then that will get fixed. If that fix breaks a plugin then that’s an actual issue for these support forums.

A well written plugin will just work. If there’s a compatibility issue such as from PHP 5.dinosaur to PHP 7.1 then that would either need a plugin update or a different plugin.

Hmmmm… in theory, yes. Except that actually very few WordPress users check their error logs, and sometimes unreconstructed plugins cause problems somewhere else entirely, and can be incredibly hard to identify on an elaborate site with a lot of plugins. IMHO, the Wordfence nags are helpful, not just in warning users, but indirectly in keeping plugin developers ‘on the case’. It’s very reassuring to know that the plugins I’m using (a) have been compatibility checked relatively recently, and (b) still have somebody keeping at least half an eye on them.

And wouldn’t it be lovely if the dinosaurs were extinct. Unfortunately I still have one or two client sites still hosted on PHP 5 servers, who simply can’t afford a migration ?? They have to stay put and take their chances, until it’s time for a new website, and the rebuild can go on a newer server. The ethics of the host still running old shared servers without a newer PHP as an option… well that’s a different question ??

Anyway, thanks for your engagement with this ??