stellarwp/nexcess-coding-standards

Release historycaution

Only two releases exist across about 2 years and 8 months, with one release in the last 12 months and a median interval of about 2 years and 5 months. This is a real maintenance concern, though the latest release is recent.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. Although it was pushed with the release, the recent inactivity lowers confidence in ongoing maintenance.

Repo toolingcaution

Composer is used for builds, but no security scanning tool is reported. That is a transparency and maintenance-hygiene gap, not evidence that the package is unsafe.

Security policycaution

The linked repository has no security policy. This weakens vulnerability-reporting transparency, although it does not by itself indicate abandonment.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all three action references are unpinned, leaving a modest workflow supply-chain hygiene gap.