veronalabs/wp-scoper

Repo bus factorcaution

One contributor made all commits in the last 3 months. Organization backing provides some handoff capacity, but no second active contributor is shown to reduce the immediate concentration risk.

Repo commit activitycaution

Only one commit was recorded in the last 3 months, so recent development activity is sparse despite the strong release history. That creates some maintenance uncertainty.

Security policycaution

The repository has no security policy. For a Composer plugin that transforms dependencies and source files, this is a meaningful transparency gap.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous sinks or audit findings, and it avoids broad top-level write permissions. However, both action references are unpinned, leaving a modest build-reproducibility risk.