winter/wn-blocks-plugin

Release historycaution

This release is only 22 days old and is the package's sole registry release, so long-term maintenance and compatibility are not yet demonstrated.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected; the security policy provides some compensating process evidence.

Workflow auditcaution

Both workflows were analyzed successfully, but all four action references are unpinned and the auditor found one high-confidence template-injection issue. No pull-request-target or workflow-run trigger, untrusted checkout, or script-injection sink was reported, limiting the severity.