wpmetabox/text-limiter

Repo commit activitycaution

The repository recorded no commits and no active maintainers during the last three months. Although the release was recently pushed, the lack of ongoing commit activity is a maintenance concern.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package. This creates some uncertainty that the linked repository is the intended source, even though the repository is under the matching organization.

Repo toolingcaution

The repository uses Composer build tooling, which fits this package, but no security scanning tools were detected. For this small plugin, that is a modest transparency gap rather than a severe risk.

Workflow auditcaution

Both workflows were analyzed without dangerous triggers, untrusted checkouts, script injection, or audit findings. However, both action references are unpinned, leaving them exposed to upstream reference changes.