findkit/wp-findkit

Repo popularitycaution

The repository has 1 star, 0 forks, and 2 watchers, so there is little public adoption evidence. This is only a supporting concern because release and commit activity are strong.

Security policycaution

No repository security policy was found. For a WordPress plugin with authentication-related functionality, this is a transparency gap that reduces assurance for reporting and handling vulnerabilities.

Workflow auditcaution

All 10 analyzed action references are unpinned, which weakens build reproducibility. The publish workflow also has five high-confidence template-injection findings, but no pull_request_target, workflow_run, untrusted checkout, or script-injection trigger was reported, so these remain workflow hygiene concerns rather than a severe standalone risk.