ssnepenthe/wp-hashids

Release historycaution

The package has had no releases in the last 12 months, and its latest release was published in February 2023. This is a meaningful maintenance concern for a dependency, although the six-release history shows it was previously maintained.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, consistent with the long release gap. The repository is not archived, but observed activity provides no evidence of current maintenance.

Repo issue activitycaution

Five issues remain open, with no issues closed and no pull requests merged in the last month. This adds to the evidence of inactivity, though it does not by itself show the package is unusable.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, but it is a secondary concern compared with the clear maintenance slowdown.

Workflow auditcaution

Both workflows use read-only permissions and the audit found no injection sinks or other reported findings. All six action references are unpinned, a modest reproducibility and supply-chain hygiene gap.