wp-hooks/wordpress-core

Repo bus factorcaution

All three recent commits came from one contributor, so maintenance is concentrated despite the repository being organization-owned; no second active contributor is shown.

Security policycaution

The repository has no security policy. This is a transparency gap for reporting and handling security issues, although it does not by itself show abandonment.

Workflow auditcaution

All five analyzed action references are unpinned, and a high-confidence audit finding reports installing a package outside a lockfile; the low-confidence cache-poisoning finding is only hygiene evidence.