hypejunction/menus_api

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance warning, although the package had six registry releases in the last year.

Repo popularitycaution

The repository has zero stars, one fork, and one watcher. This indicates limited adoption evidence, but popularity is supporting evidence and does not outweigh the package's release and testing record.

Repo toolingcaution

Composer is used as a build tool, which fits the package ecosystem, but no security scanning tools were detected. The missing scanning is a modest repository hygiene gap.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, but it is not evidence that the package is unsafe by itself.

Workflow auditcaution

Both workflows were fully analyzed with no untrusted checkouts, injection findings, or excessive permissions. However, all 11 action references are unpinned, leaving the build exposed to upstream action changes.