akirk/extract-wp-hooks

Repo commit activitycaution

There were no commits and no active maintainers in the three months before collection. This is a meaningful maintenance concern, although the July push and recent registry releases provide some compensation.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving one layer of repository hygiene uncovered.

Security policycaution

The repository has no security policy. For a small utility this is not a severe dependency risk, but it reduces transparency about vulnerability reporting.

Workflow auditcaution

All 10 analyzed action references are unpinned, which weakens build reproducibility. The high-confidence template-injection findings are hygiene concerns here because no pull_request_target, workflow_run, untrusted checkout, or script-injection path was detected.