zestry-dev/wp-toolkit

A toolkit for building WordPress plugins where a file in a directory is a feature: a per-plugin service container plus opt-in modules for CLI commands, admin pages, REST routes, post types, cron, blocks, migrations and more, copied into your plugin under your own namespace.

Latest v0.0.4

Packagist

80%

Total Score

healthy

Healthy, with strong recent maintenance; concentrated ownership and unpinned CI actions are the main caveats.

Health Score Breakdown

Repo bus factor

Two contributors are active, but one made about 97% of the 66 recent commits. Organization backing provides some handoff capacity, yet ownership remains highly concentrated.

Repo tooling

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and maintenance gap.

Security policy

The repository has no security policy, so users lack a documented channel and process for reporting vulnerabilities.

Version stability

Version v0.0.4 is still before a stable major release, so the API may change, but it is not marked as a prerelease and releases have been regular.

Workflow audit

Both workflows use read-only permissions and the audit found no dangerous sinks or high-severity findings, but all five analyzed action references are unpinned, weakening build reproducibility and update safety.