wildwolf/wp-two-factor-auth

Release historycaution

The latest registry release was published in December 2021, nearly five years before collection, with no releases in the last 12 months. This is a substantial maintenance concern for a security-sensitive WordPress plugin.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months. Recent pull-request merges provide some counterevidence of repository activity, but do not establish ongoing development.

Security policycaution

The repository has no published security policy. That reduces transparency for a plugin handling authentication, although CodeQL and Sonar scanning provide some compensating security practice.

Workflow auditcaution

All workflows were analyzed and have job-level permission scoping with no untrusted checkouts or script injection, but one high-confidence finding shows a build workflow using a floating container image tagged latest.