wpsyntex/polylang-stubs

Release historycaution

The package has ten releases over about five and a half years, but no releases in the last 12 months. The recent repository push partly offsets the registry pause, but the release cadence remains a maintenance concern.

Repo commit activitycaution

No commits or active maintainers were recorded in the last three months, which weakens evidence of ongoing development despite the repository's recent push timestamp.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tool was detected, leaving a modest repository hygiene gap.

Security policycaution

The repository has no security policy, reducing transparency for reporting and handling vulnerabilities.

Workflow auditcaution

The sole workflow was fully analyzed, but all four action uses are unpinned and it contains two high-confidence template-injection findings. No untrusted checkout or dangerous trigger was reported, so this is a significant hygiene concern rather than a standalone critical risk.