optimistdigital/nova-menu-builder

Repo commit activitycaution

There were no commits and no active maintainers in the past three months. This is a meaningful recent-activity gap, although the release history shows five releases in the past year.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools are reported. The missing scanning is a modest transparency and maintenance weakness rather than evidence that the release is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and disclosure expectations undocumented. This lowers transparency but does not by itself indicate abandonment.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkouts, injection findings, or high-confidence audit findings. However, all three action references are unpinned, so workflow dependencies can drift and should be treated as a hygiene gap.