foxelabs/wp-cache-helper

Release historycaution

The package is only 57 days old and all five releases occurred within one day, so it has not yet demonstrated a sustained maintenance cadence.

Repo bus factorcaution

All six commits in the last three months came from one contributor, leaving maintenance dependent on a single active developer; organization backing offers some handoff capacity but no second active contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and response expectations less clear for a reusable WordPress library.

Workflow auditcaution

All eight analyzed action references are unpinned, so workflow dependencies can change unexpectedly; the audit found no untrusted checkout, script injection, or high-severity issue, and only one workflow has top-level write permissions.