alleyinteractive/wordpress-autoloader

Release historycaution

The package has nine releases since February 2022, but none in the last 12 months; this indicates a meaningful slowdown in release activity.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a concrete sign that maintenance has recently stalled.

Repo issue activitycaution

There are no open issues and three open pull requests, but no issues or pull requests were merged in the last month, suggesting limited recent throughput.

Workflow auditcaution

All six action references are unpinned, and the audit found a high-confidence bot-condition issue in the Dependabot auto-merge workflow. The pull_request_target trigger has no untrusted checkout or script-injection sink, so it is not severe on its own, but the workflow still needs tightening.