coldtrick/breadcrumb_menu

Release historycaution

There have been no releases in the last 12 months, despite a package history dating back over seven years; this lowers confidence in ongoing maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, indicating limited recent development activity.

Repo toolingcaution

Composer is used for builds, but no security scanning tooling is present. This is a modest transparency and hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All four workflows use unpinned actions, and the audit found high-confidence secrets-inherit usage in the release workflow. There are no untrusted checkouts or script-injection findings, but the workflow hygiene still warrants caution.