htmlburger/wpemerge-plugin

Release historydanger

The package has five releases since May 2020, but none in the last four years; the latest registry release was in April 2022. This is a substantial maintenance concern despite the historical release cadence.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package having received no release since April 2022. The repository is not archived, but current maintenance capacity is not evident.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, with three issues still open. This supports the broader evidence of inactive project maintenance.

Security policycaution

The repository has no security policy, which reduces transparency for reporting and handling security issues. This is a secondary concern because the project is clearly backed and the workflow audit found no high-severity issue.

Workflow auditcaution

The single workflow was fully analyzed and uses read-only permissions, with no untrusted checkout or script-injection findings. However, all four action references are unpinned and a high-confidence low-severity finding reports installation outside a lockfile, leaving moderate workflow hygiene concerns.