iandunn/wp-cli-plugin-active-on-sites

Maintainerscaution

The registry lists one maintainer, consistent with the repository's user ownership but leaving little visible publishing redundancy when combined with the one-contributor recent activity.

Repo bus factorcaution

All recent commits came from one contributor, giving the project a single-person maintenance dependency. Because the repository is user-owned rather than organization-owned, there is no provided organizational backing to offset that concentration.

Repo commit activitycaution

Only one commit was recorded in the last three months from one active maintainer. That is a real maintenance concern, although the recent release and unarchived repository provide some compensating evidence.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected. For a small utility this is a hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities.