wp-content-framework/api

Release historydanger

The latest release was over five years ago, despite 78 releases historically and a previously weekly median interval. No releases appeared in the last 12 months, indicating substantial abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release gap and leaving little evidence of ongoing maintenance.

Licensecaution

A license file is present, but it was detected as GPL-3.0 while the registry declares GPL-2.0+, creating a material licensing inconsistency for adopters to resolve.

Workflow auditcaution

All 48 analyzed action references are unpinned, and a high-confidence unpinned container image plus an untrusted checkout in a pull_request_target workflow weaken build reproducibility and CI safety. The low-confidence environment finding is only a hygiene concern.