arraypress/wp-string-utils

Project backingcaution

The repository is owned by an individual account rather than an organization, so there is no demonstrated organizational maintenance handoff; active contributions provide some compensation.

Release historycaution

The package is only 24 days old and has one release, so long-term maintenance and compatibility are not yet demonstrated. Recent repository activity partly offsets the immaturity concern.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool is configured, leaving a modest transparency and monitoring gap.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and coordinated response less clear for consumers.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, both action references are unpinned, weakening build reproducibility.