codeb/wp-feature-flags

Release historycaution

The package has had no registry release in roughly two years, with zero releases in the last 12 months; this is a meaningful maintenance concern despite six total releases.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, indicating currently limited visible maintenance activity.

Security policycaution

No security policy was found, leaving vulnerability-reporting expectations unclear; this is a transparency gap for a maintained dependency.

Version stabilitycaution

Version v0.4.0 is a stable, non-prerelease release, although it remains below 1.0 and therefore signals a less mature compatibility promise.

Workflow auditcaution

All five workflows were analyzed without untrusted checkouts, injection findings, or write-wide permissions. However, all 26 action references are unpinned and a high-confidence low-severity adhoc-package finding was reported, so workflow hygiene is only partly strong.