lwplugins/lw-seo

Licensecaution

The artifact declares GPL-2.0-or-later, but its license file was detected as GPL-3.0; although licensing is present, the mismatch needs clarification before adoption.

Repo bus factorcaution

All 26 recent commits came from one contributor, creating concentration risk; organization backing provides some capacity to hand off maintenance but does not remove the current single-contributor pattern.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

Both workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injection, or audit findings, and one scopes permissions at job level. However, all 9 action references are unpinned, weakening build reproducibility and supply-chain protection.