Package Health/inc2734/wp-custom-css-to-editor

inc2734/wp-custom-css-to-editor

The small runtime footprint and included README keep integration straightforward. Maintenance is active, but recent commits come from one contributor, and the workflow uses two unpinned actions. The low-confidence cache finding is a minor hygiene concern.

Latest 0.1.7

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo bus factor

One contributor made all seven commits in the last three months, leaving maintenance dependent on a single person and creating a real continuity risk.

Repo tooling

Composer build tooling is present, but no security scanning tool was detected. For this small package that is a moderate hygiene gap rather than evidence of abandonment.

Security policy

The repository has no security policy, which makes vulnerability reporting less transparent, though the package is actively maintained and has a small runtime dependency surface.

Version stability

Version 0.1.7 is not a stable-major release, so its API may still change; it is nevertheless a normal non-prerelease version with no recent prerelease pattern.

Workflow audit

The single workflow was fully analyzed and uses read-only permissions, with no untrusted checkout or script-injection path. Both actions are unpinned, and the low-confidence cache-poisoning finding is a minor workflow hygiene concern rather than a severe risk.