devuri/wp-filename-hasher

Release historycaution

The package has had no registry release in over two years, with zero releases in the last 12 months. That is a meaningful maintenance concern despite six releases during its initial launch period.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This weakens evidence of ongoing maintenance, although the repository is not archived and was pushed more recently.

Security policycaution

The repository has no security policy. For a small WordPress upload-handling plugin, this reduces disclosure transparency but is not by itself evidence of abandonment.

Workflow auditcaution

Both workflows were fully analyzed with no dangerous findings, but all three referenced actions are unpinned. That leaves routine build dependencies exposed to moving versions and is a workflow hygiene concern.