alleyinteractive/wp-block-audit-command

Repo bus factorcaution

All recent commits came from one contributor, leaving maintenance dependent on a single active person; organization ownership provides some backing but does not remove the concentration risk.

Repo commit activitycaution

Only two commits were recorded in the last three months, which shows ongoing activity but at a limited pace.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all three action references are unpinned, which weakens build reproducibility and supply-chain hygiene.