wp-pay-extensions/event-espresso

Repo bus factorcaution

One contributor made all recent commits, creating a concentrated maintenance path. Organization ownership provides some handoff capacity but does not remove the current single-contributor risk.

Repo commit activitycaution

Only one commit was recorded in the last three months, indicating thin recent maintenance despite the release published during that period.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, so the linkage is less transparent even though the source tree appears specific to this extension.

Security policycaution

The linked repository has no security policy, reducing disclosure transparency for a payment-related integration.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers or audit findings, but all three action references are unpinned, leaving avoidable build-integrity risk.