arraypress/wp-file-utils

Release historycaution

This is a young package, only 23 days old, with one release and no established release cadence. That limits maturity evidence, but recent repository activity provides some compensation.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. That is a modest verification gap rather than evidence of abandonment or an unsafe release.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and disclosure expectations undocumented for a package that handles file paths and downloads.

Workflow auditcaution

The workflow audit is complete and found no dangerous triggers, untrusted checkouts, script injection, or audit findings. Both action references are unpinned, which is a minor supply-chain hygiene gap.