duckdev/wp-cache-helper

Registry deprecationdanger

Packagist marks the entire package as abandoned and names foxelabs/wp-cache-helper as its replacement. This is a material dependency risk even though the source repository remains active.

Repo bus factorcaution

One contributor made 100% of the recent commits. The organization-owned repository provides some handoff capacity, but no second recent contributor is shown.

Repo commit activitycaution

There was one commit from one active maintainer in the last three months. This shows recent activity but only limited evidence of sustained maintenance capacity.

Security policycaution

The repository has no security policy. For a small library this is a transparency gap, though it does not by itself indicate unsafe code.

Workflow auditcaution

All three workflows were analyzed without high-confidence audit findings or untrusted checkout paths. However, all eight action references are unpinned and one workflow grants top-level write permission, creating avoidable build-integrity and token-scope concerns.