silverassist/wp-plugin-kernel

Lifecycle scriptscaution

Composer post-install and post-update scripts run during dependency operations, adding some execution surface even though no harmful behavior is established by this signal alone.

Release historycaution

The package is only 43 days old with two releases, so it has not yet demonstrated a long maintenance track record, though the latest release is current.

Repo bus factorcaution

One contributor accounts for 100% of the recent commits. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

Only two commits were recorded in the last three months, all from one active maintainer; this is some recent activity but a thin maintenance record.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest process gap.