skaut/phan-wordpress-stubs

Registry deprecationdanger

The registry marks the entire package as abandoned and names skaut/wordpress-stubs as its replacement, making this release unsuitable for a new dependency despite other healthy evidence.

Release historycaution

The package has 31 releases but no registry release in the last 12 months, and version 1.25.0 was published on April 19, 2022; this indicates a stale release line.

Security policycaution

The repository has no security policy, leaving reporting and response expectations undocumented; this is a transparency gap, although it is less important for a static stub package.

Workflow auditcaution

All 6 action references are unpinned, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow; one workflow also grants top-level write permissions. The pull_request_target trigger has no untrusted checkout or script-injection sink.