freemius/wordpress-sdk

Repo toolingcaution

Composer is used as a build tool, but no repository security-scanning tooling was detected. That is a transparency and maintenance gap, though not severe enough to outweigh the active project signals.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations unclear for a package that handles licensing, checkout, and account-related functionality.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, injections, or audit findings. However, all five action references are unpinned, which weakens build reproducibility and supply-chain hygiene.