alleyinteractive/wp-type-extensions

Lifecycle scriptscaution

The package defines pre-install and post-install Composer scripts. Install-time scripts deserve review because they execute during installation, although this signal alone does not establish that they are unsafe.

Repo commit activitycaution

No commits and no active maintainers were observed during the last three months. The recent release is compensating evidence of publishing activity, but the lack of recent development activity raises a maintenance concern.

Repo issue activitycaution

There is one open issue and one open pull request, but neither new issues nor pull requests were recorded as opened or merged in the last month. This suggests limited current community activity without proving abandonment.

Repo toolingcaution

The repository uses Composer, but no security scanning tools were detected. The absence of scanning reduces process transparency, while the simple build setup limits the significance of this gap.

Token permissionscaution

The only workflow does not declare top-level token permissions. No write permissions were observed, but explicit least-privilege settings would provide stronger workflow transparency.