wpdesk/wp-code-sniffer

Dependency profilecaution

The package has four declared runtime dependencies, including PHP_CodeSniffer and WordPress coding standards; this is expected for a coding-standard package but adds dependency surface.

Repo bus factorcaution

All recent commits came from one contributor. Organization backing provides some handoff capacity, but no second active contributor is shown to offset the concentration.

Repo commit activitycaution

Only one commit was recorded in the last three months from one active maintainer, so current maintenance capacity appears limited despite the recent release.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool is configured, leaving a security-hygiene gap.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.