kunoichi/plugin-recommender

Release historycaution

The latest release was nearly four years ago, with no releases in the last 12 months and only two releases overall. This is meaningful evidence of possible abandonment for a dependency.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap. The repository is not archived, but there is no recent activity to offset the concern.

Security policycaution

The repository has no security policy. This weakens disclosure and maintenance transparency, although it is less concerning for this small WordPress utility than for a security-sensitive package.

Workflow auditcaution

All 6 analyzed action references are unpinned, and the workflow contains a high-confidence template-injection finding plus archived actions. No dangerous trigger or untrusted checkout was found, so this is workflow hygiene risk rather than a severe standalone issue.