hexadog/laravel-menus-manager

Release historycaution

The package has 13 releases since October 2020, but none in the roughly two and a half years since March 2024. That weakens confidence in ongoing maintenance, although the latest release is stable.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the three months measured, consistent with the long period since the March 2024 release. This raises abandonment risk even though the repository is not archived.

Repo toolingcaution

Composer is used for the build, but no security scanning tooling is present. That is a modest transparency and maintenance gap rather than evidence of an unsafe package.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear. This is a hygiene gap, not a sign that the package is unfit on its own.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout or injection findings, but both action references are unpinned and the auditor found a high-confidence unpinned container image. That weakens build reproducibility and supply-chain hygiene.