indiewordpress/wordpress-indieweb

Repo bus factorcaution

All seven recent commits came from one contributor. Organization backing provides some handoff capacity, but no second contributor was active in the measured period, so this remains a meaningful concentration risk.

Repo commit activitycaution

Seven commits were made in the last three months, showing current work, but only one maintainer was active during that period, limiting maintenance capacity.

Security policycaution

No security policy was found in the repository, leaving vulnerability-reporting and response expectations unclear for a security-relevant WordPress plugin.

Token permissionscaution

All four workflows omit top-level token permissions declarations. No workflow requests top-level write access, but explicit least-privilege settings would provide stronger CI security hygiene.