humanmade/psalm-plugin-wordpress

Release historycaution

The package has had no registry release in about 20 months despite 15 releases since 2020, which indicates a meaningful slowdown in delivery. Its established history partly offsets the concern.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although it was pushed more recently, the observed short-term inactivity lowers confidence in ongoing maintenance.

Security policycaution

The repository has no published security policy. This is a transparency gap, though it is less significant for a small analysis plugin than for a security-sensitive service.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no detected dangerous sinks or audit findings. However, both action references are unpinned, leaving build inputs less reproducible.