alleyinteractive/pest-plugin-wordpress

Repo bus factorcaution

All recent commits came from one contributor, which creates concentration risk. The organization-owned repository provides some handoff capacity, but no second active contributor is shown in this period.

Token permissionscaution

Neither workflow declares top-level token permissions, and neither explicitly declares read-only permissions. No write permissions are observed, but the missing declarations are a workflow security-hygiene gap.