webdados/wp-github-updates

Licensecaution

The artifact contains a license and declares GPL-2.0-or-later, but the detected GPL-2.0 text is narrower than that declaration, creating a minor licensing clarity concern.

Release historycaution

The package was released only hours ago and has three releases in less than a day, so there is too little history to establish a dependable maintenance pattern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and hygiene gap.

Security policycaution

The repository has no security policy, so there is no documented channel or process for reporting vulnerabilities.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers or audit findings, but both action references are unpinned, weakening build reproducibility and update safety.