devuri/wp-kdx-canvas

Release historycaution

The package has had no registry release in roughly 22 months and no releases in the last 12 months, indicating a prolonged pause in delivery. The repository was pushed more recently, so this is a maintenance concern rather than clear abandonment.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, which is direct evidence of currently stalled development and raises abandonment risk.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. This is a transparency gap, though not severe on its own.

Version stabilitycaution

The release is not marked prerelease, but it remains on the 0.x major line, so compatibility maturity is less established than for a stable 1.x package.

Workflow auditcaution

Both workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injections, or audit findings. However, all three action references are unpinned, so their code can change without a repository commit.