axepress/wp-graphql-plugin-boilerplate

Release historycaution

The package has 11 releases over roughly four years, but no registry release in the last 12 months and the latest release is about 15 months old, which raises maintenance concern.

Repo bus factorcaution

One contributor made all recent commits, creating a concentrated maintenance dependency; organization backing provides some ability to hand off maintenance but does not remove the concentration.

Repo commit activitycaution

Only two commits were recorded in the last three months, indicating limited recent development activity despite other repository activity.

Version stabilitycaution

Version 0.1.1 is a normal, non-prerelease version, but the pre-1.0 major version signals a still-evolving API.

Workflow auditcaution

The single workflow was fully audited, uses read-only permissions, and has no untrusted checkout or script-injection findings. However, two of nine action references are unpinned and high-confidence secrets-inherit findings expose reusable-workflow credentials more broadly than necessary.