hypejunction/menus_entity

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement named. This is a severe adoption risk despite recent publishing activity.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last 3 months. Although the latest push was recent, this indicates a current pause in development.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package. This makes the package-to-source relationship less transparent, even though subpackages can legitimately use different repository names.

Security policycaution

The repository has no security policy. For a small plugin this is a modest transparency gap, but it gives users no documented path for reporting vulnerabilities.

Workflow auditcaution

Both workflows were analyzed successfully and have no detected dangerous sinks or high-severity findings, but all 11 action references are unpinned. That leaves CI exposed to changes in referenced action code.