lwplugins/lw-pixel

Repo bus factorcaution

One contributor made all 71 commits in the last three months, giving the project a single-person operational dependency. Organization ownership partly compensates by providing a potential handoff path, but continuity risk remains.

Security policycaution

No security policy is present in the repository. For a WordPress plugin handling tracking and server-side conversion settings, this is a modest transparency gap.

Workflow auditcaution

Both workflows were analyzed without failures and have no untrusted checkout or script-injection findings; one workflow scopes permissions at job level. All 13 action references are unpinned, which weakens reproducibility, while the low-confidence cache-poisoning finding is hygiene rather than a confirmed risk.