dre1080/wp-graphql-upload

Release historydanger

The latest registry release was over three years ago, with no releases in the last 12 months. Six releases over the package's lifetime show prior maintenance, but the current gap raises abandonment risk.

Repo commit activitydanger

The repository recorded 0 commits and 0 active maintainers in the last three months. Its last push was over two years ago, providing little evidence of current maintenance capacity.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. That weakens automated supply-chain hygiene without indicating an immediate failure.

Security policycaution

The repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is less severe than the demonstrated maintenance slowdown.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, both of its action references are unpinned, leaving dependency versions mutable.