adzadzadz/wp-plugin-framework

Licensecaution

The manifest declares GPL-2.0-or-later and the artifact license file is detected as MIT, creating an unresolved licensing inconsistency despite license files existing in both artifact and repository.

Lifecycle scriptscaution

Composer install, update, and create-project scripts run package lifecycle actions. These are relevant supply-chain exposure, but their presence alone does not show unsafe behavior.

Release historycaution

Seven releases arrived during the initial period, but none were published in the last 12 months; the latest release was about 13 months ago. This is meaningful abandonment risk for a framework.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, consistent with the long release gap and raising maintenance risk.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations unclear for a framework intended to be integrated into other projects.