aeyoll/pow-captcha-for-wordpress

Repo bus factorcaution

All 2 recent commits came from one contributor, so maintenance depends entirely on a single person and has limited handoff resilience.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. That leaves a transparency and detection gap for a security-oriented plugin.

Security policycaution

The repository has no security policy, making the process for reporting and handling vulnerabilities unclear.

Workflow auditcaution

The only workflow was fully analyzed and has no reported audit findings, with job-level permissions used. However, all 3 action references are unpinned, so workflow dependencies can change unexpectedly.