rwsite/wp-thumbnail-plugin

Maintainerscaution

Only one account has registry publish access, limiting publishing redundancy. The linked repository is user-owned rather than organization-backed, so there is no visible organizational compensation.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, despite a recent package release. That weakens evidence of ongoing maintenance.

Repo popularitycaution

The repository has only 2 stars, 2 forks, and 1 watcher, providing little evidence of broad external review or adoption. Low popularity is supporting evidence, not proof of poor quality.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a moderate transparency gap for a WordPress plugin.

Workflow auditcaution

All five analyzed action references are unpinned, which leaves the build exposed to changing action contents. The workflow has no untrusted checkout or script-injection findings, so this is a hygiene concern rather than a severe risk.