wp-content-framework/device

Release historydanger

The latest release was on December 21, 2020, with no releases in the last 12 months despite 41 historical releases. This long publishing gap is a substantial abandonment concern.

Repo commit activitydanger

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the package's long release hiatus. Organization backing is present, but no recent work is observed.

Licensecaution

The artifact contains a license file and the repository also has one, but the registry declares GPL-2.0+ while the detected text is GPL-3.0. The mismatch warrants checking compatibility before adoption.

Security policycaution

The repository has no security policy, leaving reporting and response expectations undocumented. This is a transparency gap, although it is less serious than the observed maintenance and workflow concerns.

Workflow auditcaution

All 48 action references are unpinned, and a pull_request_target workflow performs an untrusted checkout, creating meaningful workflow supply-chain exposure. The low-confidence GITHUB_ENV finding is only a hygiene concern, while archived actions add maintenance risk.