pop-schema/post-tag-mutations-wp

Repo bus factorcaution

All 14 recent commits came from one contributor, creating concentration risk. The organization-owned repository provides some ability to hand maintenance off, so this is a caution rather than a severe abandonment signal.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package. Although name mismatches can be normal for monorepos, the absence of both a match and an explicit package mention creates a genuine provenance and package-to-source linkage concern.

Repo popularitycaution

The repository has zero stars and forks and only one watcher, which limits external corroboration and community visibility. Popularity is supporting evidence rather than a verdict, so this is a modest concern given the strong release history.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. Build support is appropriate, while the missing automated security tooling modestly reduces assurance.