wp-php-toolkit/merge

Repo bus factorcaution

All recent commits were made by one contributor, giving a 100% top-contributor share. Organization ownership provides some ability to hand maintenance off, so this is a caution rather than a severe abandonment signal.

Repo commit activitycaution

Only one commit was recorded in the last three months, with one active maintainer. This is materially weaker than the strong registry release cadence and warrants caution about ongoing source-level maintenance.

Repo issue activitycaution

There are no open issues or pull requests and no issue or pull-request activity in the last month. This is not inherently unhealthy for a small, stable component, but it provides little evidence of an active feedback and review process.

Repo toolingcaution

Composer is used as a build tool, which supports reproducible package management, but no security-scanning tool was detected. The missing scanning process is a modest supply-chain hygiene gap.

Security policycaution

The repository has no security policy. For a package intended to process and merge content, this reduces disclosure transparency and is a genuine maintenance-hygiene gap.