Package Health/nowo-tech/dashboard-menu-bundle

nowo-tech/dashboard-menu-bundle

Symfony bundle for configurable dashboard menus with i18n (JSON translations), tree structure (parent/position), permissions, Twig and JSON API. No external ORM extensions.

Latest v2.6.0

Packagist

62%

Total Score

caution

Active releases and a maintained repository are offset by an unsafe workflow audit and entirely unpinned GitHub Actions.

Health Score Breakdown

Workflow audit

The audit analyzed all 6 workflows, but the CodeRabbit workflow combines a workflow_run trigger, an untrusted checkout, and a high-confidence template-injection finding. All 19 action references are unpinned, while two workflows also grant top-level write permissions, making workflow hygiene a material supply-chain concern.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Héctor Franco Aceituno

Nowo.tech

Direct Dependencies

Dependency	Last Release	Score
psr/log Version ^1.0 \|\| ^2 \|\| ^3	—	—
psr/cache Version ^1.0 \|\| ^2.0 \|\| ^3.0	—	—
psr/clock Version ^1.0	—	—
doctrine/orm Version ^3.7	—	—
symfony/form Version ^7.4 \|\| ^8.0	—	—