26b/wp-framework

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last three months, which is a meaningful maintenance warning. The release published on April 16, 2026 shows recent activity but does not offset the current lull entirely.

Security policycaution

The repository has no security policy, reducing transparency for reporting and handling vulnerabilities. This is a moderate gap, not evidence that the package is unsafe.

Workflow auditcaution

All 6 analyzed action references are unpinned, weakening build reproducibility. The workflow has read-only permissions, no untrusted checkout or script-injection findings, and a complete audit, which keeps this as hygiene caution rather than a severe risk.