wpmvc/routing

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, despite the repository not being archived; this is a concrete sign that maintenance has slowed after the latest release.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving security hygiene less transparent than it could be.

Security policycaution

The repository has no security policy, so consumers have no documented vulnerability-reporting path; this is a transparency gap, not evidence of maliciousness.

Workflow auditcaution

The sole workflow has no dangerous triggers or audit findings, but all seven action references are unpinned, which weakens build reproducibility and action supply-chain control.