php-stubs/wordpress-tests-stubs

Repo bus factorcaution

All 27 recent commits came from one contributor. Organization ownership provides some handoff capacity, but no second active contributor is shown, leaving a meaningful concentration risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a gap in automated security hygiene.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.

Workflow auditcaution

The workflow is fully analyzed, uses read-only permissions, and has no untrusted checkout or injection findings. However, all six action references are unpinned, so their contents can change without a version pin.