alleyinteractive/wp-soft-transients

Lifecycle scriptscaution

Composer pre-install and post-install scripts execute during installation, creating an additional trust surface even though this signal alone does not show harmful behavior.

Release historycaution

Only two releases have been published, with no releases in the last 12 months; the latest release is about 17 months old, limiting evidence of ongoing maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the three months measured; together with the old latest release, this is meaningful evidence of currently inactive maintenance.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and hygiene gap.

Workflow auditcaution

The single workflow was fully analyzed with no high-confidence audit findings or untrusted checkouts, but all three action references are unpinned, reducing build reproducibility and increasing update risk.