wpstarter/o-canvas-core

Lifecycle scriptscaution

The package runs a post-autoload-dump install-time script. This is common for Composer packages but adds execution during installation and deserves review before adoption.

Release historycaution

This is the package's first release, published today, so there is no release track record yet. Its newness limits evidence of maturity but does not by itself indicate abandonment.

Repo commit activitycaution

The repository has recorded 0 commits and 0 active maintainers in the last 3 months, although this is consistent with the package being only 0 days old. It leaves maintenance capacity unproven rather than demonstrating a collapse.

Workflow auditcaution

All 4 workflows were analyzed without dangerous triggers or audit findings, but all 15 action references are unpinned. That weakens build reproducibility and leaves the workflows exposed to action updates.