screenfeed/sf-adminbar-tools

Release historydanger

Only one release exists, published about five years and eight months ago, with none in the last 12 months. This is strong evidence of abandonment risk for a WordPress plugin.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap and leaving compatibility work unverified.

Lifecycle scriptscaution

post-install-cmd and post-update-cmd scripts run during Composer operations, adding execution during installation and updates. The signal provides no evidence that these scripts are unsafe, so this is a limited supply-chain hygiene concern.

Security policycaution

The repository has no security policy, making the process for reporting and handling vulnerabilities unclear. This matters for a plugin that runs inside WordPress sites.

Workflow auditcaution

All five analyzed action references are unpinned, which weakens build reproducibility. The audit found no untrusted checkouts, script injection, dangerous triggers, or top-level write permissions, so this remains a hygiene concern rather than a severe workflow risk.