wp-cli/checksum-command

Repo bus factorcaution

One contributor made 12 of 13 recent commits, so maintenance is concentrated; the second active contributor and organization backing partly compensate but do not remove the continuity risk.

Workflow auditcaution

All 8 workflows were analyzed with no audit findings or untrusted checkouts, but 7 of 11 actions are unpinned and 5 workflows grant top-level write permissions; these are workflow hygiene concerns without a corroborating dangerous sink.