stellarwp/core-update-notice

Release historycaution

This is a young package with only one release over the past 30 days, so long-term release consistency is not yet demonstrated. Recent repository activity provides some evidence of active development but cannot establish a mature release track record.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. This is a modest process gap rather than evidence of unsafe publishing on its own.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and response guidance undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all three action references are unpinned, which weakens build reproducibility and supply-chain control.