idleberg/wordpress-vite-assets

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The recent release and push provide some counterweight, but the current lack of development activity is a maintenance concern.

Repo toolingcaution

The project uses Composer for its build and dependency tooling. No security scanning tools were detected, which is a modest process gap but not a standalone adoption blocker.

Security policycaution

The repository has no security policy. This does not show a vulnerability, but it leaves disclosure and response practices less transparent.

Workflow auditcaution

Both workflows were fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all 5 of 5 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.