bradp/schedules

Release historydanger

The package has had only two releases, with the latest over five years ago and none in the last 12 months. This is substantial evidence of stalled maintenance, although the repository remains available.

Maintainerscaution

The registry lists one maintainer, which limits the visible maintenance bus factor for a package with no recent release activity. The linked repository is owned by the same individual, providing some continuity but not redundancy.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. That reinforces the long release gap and raises abandonment risk.

Security policycaution

The repository has no published security policy. For a small WordPress plugin this is a transparency gap, though the absence does not itself show an active security problem.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but both of its two action references are unpinned. This is a modest reproducibility and supply-chain hygiene gap, not a severe risk by itself.