arts/wp-plugin-standards

Dependency profilecaution

Seven runtime dependencies are substantial for a small tooling package, but the dependencies directly support its PHPCS and PHPStan purpose; this adds update and compatibility surface without making the package unsuitable.

Maintainerscaution

Only one registry account can publish releases, creating a publishing single point of failure; the linked repository is user-owned rather than organization-owned, so there is no provided project-backing evidence to offset that concentration.

Release historycaution

The package is only 35 days old and has a single release, so there is not enough release history to establish dependable maintenance or compatibility patterns.

Repo bus factorcaution

All recent repository commits come from one contributor, leaving maintenance dependent on a single person; the repository owner is an individual, so no organizational handoff is shown.

Repo commit activitycaution

One commit from one active maintainer in the last three months shows recent activity, but the very small amount of activity provides only limited evidence of sustained maintenance.