adnduweb/ci4_menu

Lifecycle scriptscaution

The package defines a post-update command, so dependency updates can execute package-provided behavior automatically. This adds operational risk even though the signal does not establish that the command is unsafe.

Release historycaution

The latest release was published in September 2020, and there were no releases in the following six years. That is strong evidence of abandonment for a framework module that may need compatibility updates.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release hiatus. The repository is not archived, but it shows no recent maintenance activity.

Repo toolingcaution

Composer is used for builds, but no security-scanning tools are configured. For a package that runs framework commands and includes database migrations, this is a meaningful transparency gap.

Security policycaution

The repository has no security policy. That makes vulnerability reporting and response expectations unclear, which is more concerning for a package that integrates controllers, database code, and publish commands.