valu/wp-graphql-polylang

Release historycaution

The package has 18 releases since November 2019, but none in the last 12 months; the latest release was about 16 months ago. This indicates a meaningful slowdown for a maintained integration package.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last 3 months. That weakens evidence of ongoing maintenance, although the latest release and repository push were about 16 months ago rather than several years ago.

Repo issue activitycaution

There were no new or closed issues and no merged pull requests in the last month, despite 36 open issues and 14 open pull requests. This suggests unresolved maintenance demand and limited recent responsiveness.

Security policycaution

The linked repository has no security policy. This is a transparency gap for a maintained package, though it is less severe because the package has tests, release notes, and a clearly linked source repository.

Workflow auditcaution

The single workflow was fully analyzed and has no untrusted checkout or script-injection findings, but all three action references are unpinned and the audit found a high-confidence unpinned container image. This creates avoidable build reproducibility and supply-chain hygiene risk.