wp-media/event-manager

Release historycaution

The package has only two releases over roughly six years, with one release in the last 12 months and a median gap of about five years and six months. The recent 4.0.1 release provides some evidence of continued maintenance, but the overall cadence is sparse.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This may reflect a stable small module, but it provides limited evidence of ongoing maintenance capacity.

Security policycaution

The linked repository has no security policy, so users have no documented channel or process for reporting vulnerabilities. This is a transparency gap, though it is partly offset by the repository's visible automated test workflows.

Workflow auditcaution

All three workflows were analyzed without dangerous triggers, untrusted checkouts, or audit findings, and none grants top-level write access. However, all five action references are unpinned, leaving avoidable dependency-integrity risk in the build workflow.