wp-graphql/wpgraphql-acf

Lifecycle scriptscaution

A post-install-cmd script runs during installation, adding install-time behavior that consumers should understand. No other provided signal shows that this script is harmful, so this is a limited hygiene concern rather than a severe risk.

Release historycaution

The package has 28 releases, but the latest registry release was about two years ago and there were no releases in the last 12 months. Recent repository activity partly offsets the publishing gap, but registry users may not receive ongoing fixes reliably.

Repo bus factorcaution

One contributor made all four commits in the last three months, giving the repository a concentrated recent bus factor. The organization-owned project provides some handoff capacity, so this is a mild concern rather than a severe risk.

Repo issue activitycaution

The repository has 59 open issues, with one new issue and no issues or pull requests closed or merged in the last month. This suggests some unresolved maintenance backlog, though it is not evidence of abandonment by itself.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and disclosure expectations undocumented. This is a transparency gap, partially offset by the presence of GitGuardian scanning.