contributte/menu-control

Release historycaution

The package has 18 releases over about 6 years, but none in the 12 months measured and its latest registry release was in November 2023. This is a meaningful maintenance concern, though the linked repository was pushed more recently.

Repo commit activitycaution

There were no commits and no active maintainers in the measured three-month period. This weakens evidence of current maintenance, although the repository is not archived.

Repo toolingcaution

The repository uses Composer and Make, but no security-scanning tools were detected. For a small library this is a hygiene gap rather than evidence of abandonment.

Workflow auditcaution

All four workflows were analyzed without failures and have no untrusted checkout or script-injection findings. However, all six action references are unpinned, and a high-confidence medium-severity secrets-inherit finding was reported in the coverage workflow.