wpmetabox/mbb-parser

Licensecaution

No license is declared, and neither the package nor repository contains a detected license file. This creates a real adoption and redistribution concern.

Package scaffoldingcaution

The package has no README, which is a minor documentation gap for a library consumers must integrate with; the absence of tests and changelog in the artifact is normal packaging practice.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. This is a modest transparency gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and response guidance undocumented.

Workflow auditcaution

The workflow audit completed successfully with no injection or high-confidence findings, but its only action reference is unpinned, reducing build reproducibility. The lack of a top-level permissions block is acceptable on its own.