wpnx/handler

Release historycaution

This is the only release, published about 15 months ago, with no releases in the last 12 months. That leaves limited evidence of an established release process and ongoing maintenance.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. For a security-focused request handler, that is a meaningful transparency and maintenance gap.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities in a package that advertises security features.

Workflow auditcaution

The workflow audit completed cleanly with no untrusted checkouts, injection findings, or excessive top-level permissions. However, all five referenced actions are unpinned, leaving build inputs less reproducible and increasing workflow supply-chain exposure.