stellarwp/foundation-container-wordpress

Release historycaution

The package is only 81 days old and has two releases, so there is limited evidence of sustained maintenance despite the recent release activity.

Repo bus factorcaution

All four recent commits came from one contributor, leaving maintenance activity concentrated despite the repository being owned by an organization.

Repo commit activitycaution

The repository recorded four commits in the last three months, showing some activity, but the amount is limited for judging ongoing maintenance.

Security policycaution

No repository security policy was found, reducing transparency for reporting and handling vulnerabilities in a package intended for WordPress projects.

Workflow auditcaution

The pull_request_target workflow has no untrusted checkout or script-injection findings, but its only action reference is unpinned, weakening build reproducibility and supply-chain hygiene.