arraypress/wp-ip-utils

Release historycaution

This is a young package, released only once 24 days ago, so long-term maintenance is not yet demonstrated. Recent repository activity partly offsets that uncertainty.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency and hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear for a security-related utility.

Workflow auditcaution

The single workflow was fully audited with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, both action references are unpinned, weakening build reproducibility.