humanmade/hm-mega-menu-block

Repo bus factorcaution

One contributor made all recent commits, which creates concentration risk. The organization-owned repository provides some handoff capacity, so this is a maintenance caution rather than a severe abandonment signal.

Repo commit activitycaution

Only one commit was recorded in the last three months, showing limited recent development activity even though releases and pull-request merges indicate the project has not stopped entirely.

Repo toolingcaution

The project uses Composer for builds, but no security-scanning tool was detected. The missing scanning coverage is a modest transparency and maintenance gap, not evidence of an unsafe package.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and response guidance undocumented. This is a transparency gap, but it is not evidence that the package is unmaintained.