foxelabs/wp-review-notice

Release historycaution

The package is only 46 days old, with six releases concentrated on one day, so its maintenance track record is still limited.

Repo bus factorcaution

All seven recent commits came from one contributor. Organization ownership provides some handoff capacity, but no second active contributor is evidenced.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected; this is a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All eight analyzed action references are unpinned, and one workflow grants top-level write access. The audit found no untrusted checkout or injection sink, so this is workflow hygiene caution rather than a severe risk.