schnti/cachebuster

Package scaffoldingcaution

A substantial README documents the plugin's behavior, limitations, installation, and URL-handling cases. Tests and a changelog are absent, which reduces validation and release transparency for a package that modifies generated asset URLs.

Project backingcaution

The source repository is owned by a personal user account rather than an organization, so the single-publisher context provides limited evidence of organizational continuity.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. Although recent registry releases provide some compensating evidence, the absence of recent source activity is a meaningful maintenance and abandonment concern.

Repo toolingcaution

Composer is used as a build/package tool, but no security scanning tools are configured. For this small PHP plugin the missing scanning is a hygiene gap rather than evidence of unfitness, but it weakens assurance.

Security policycaution

No repository security policy was found, leaving disclosure and response expectations undocumented. This is a transparency gap, though the package's small scope and lack of reported issue backlog partly limit its significance.