gecka/wp-admin-menu

Release historycaution

The package is only 0 days old, despite six releases in the last 12 months; this gives little evidence of sustained maintenance or release stability.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last 3 months. Because the package is only 0 days old, this is not evidence of abandonment, but sustained maintenance is unproven.

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tools were detected; this is a modest transparency and hygiene gap.

Security policycaution

The repository has no security policy. This is a minor transparency gap for a new package, though it is not a severe dependency risk on its own.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout, injection, or high-severity findings. However, all 8 action references are unpinned, weakening build reproducibility and supply-chain hygiene.