spaghetti-dojo/wp-entities-search

Release historycaution

The package has had no releases in the last 12 months, and its latest release was published about 2 years and 3 months ago. This is a meaningful maintenance concern for a beta package.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. Combined with no registry releases in the last year, this raises concern about current maintenance capacity.

Repo package mentioncaution

The linked repository is named kensaku rather than wp-entities-search and does not mention this package in its README. That weakens confidence that the repository directly backs this release.

Security policycaution

The repository has no security policy. This is a transparency gap, although it is less significant than the maintenance and repository-linkage concerns.

Token permissionscaution

Three workflows do not declare top-level token permissions, and one declares write access. More explicit least-privilege configuration would improve workflow transparency and reduce CI risk.