devgeniem/wp-queue

Licensecaution

The artifact declares MIT, but its LICENSE file is detected as GPL-3.0; the repository also has a license file, so the conflicting license evidence needs clarification.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months. The recent release and August push provide some counter-evidence, but the current development cadence remains a concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented.

Workflow auditcaution

Both workflows were analyzed without high- or medium-severity findings and have no untrusted checkout or script-injection issues. However, all 7 action references are unpinned, weakening build reproducibility and supply-chain protection.