pfefferle/wordpress-webmention

Maintainerscaution

One registry account has publish access, which creates some publishing concentration; the repository evidence shows three active contributors, partly compensating for that limitation.

Repo bus factorcaution

Three contributors were active, but one contributor made 24 of 26 commits, or about 92%, leaving a meaningful bus-factor concern.

Security policycaution

The repository has no security policy file, which is a transparency gap for reporting and handling vulnerabilities.

Workflow auditcaution

All 8 workflows were analyzed successfully with no audit findings, no untrusted checkouts, and no script-injection sinks. However, all 22 action references are unpinned, so workflow supply-chain reproducibility is weaker even though no dangerous trigger or token pattern was found.