attributes-php/wp-fastendpoints-contracts

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which weakens evidence of ongoing maintenance for a package released within the broader review period.

Repo toolingcaution

Composer is used for the build, but no security scanning tool is configured; this is a modest transparency and maintenance gap rather than evidence of an unsafe release.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The only workflow was fully analyzed, uses read-only permissions, and has no dangerous audit findings. However, both action references are unpinned, reducing build reproducibility.