dereuromark/cakephp-menu

Repo commit activitycaution

No commits or active maintainers were recorded in the last three months. The very recent release and repository push provide some compensation, but this still weakens evidence of sustained maintenance.

Repo popularitycaution

The repository has five stars, one fork, and two watchers. This is limited adoption evidence, but popularity is only supporting evidence and does not outweigh the maintenance signals.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanner is a modest hygiene gap rather than evidence of abandonment.

Version stabilitycaution

Version 0.2.0 is not a stable-major release, so compatibility may still change. It is not marked prerelease, which partly offsets the maturity concern.

Workflow auditcaution

Both workflows were analyzed successfully with no dangerous audit findings, untrusted checkouts, or script injections. However, all 12 action references are unpinned and one workflow grants top-level write permission, creating a workflow supply-chain and least-privilege caution.