davidwebca/wordpress-menu-classes

Project backingcaution

The repository and registry package are owned by the same individual account. That provides clear ownership, though it does not provide the resilience of organization backing.

Release historycaution

The package has 8 releases since April 2021, but none in the last 12 months; the latest release was about 19 months ago. This lowers confidence in ongoing maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months. For a package whose latest release was about 19 months ago, this is meaningful evidence of slowing maintenance.

Repo toolingcaution

Composer is used for the build, but no security scanning tool was detected. This is a hygiene gap rather than evidence that the package is unfit to depend on.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap for ongoing maintenance.