plaisio/menu-core

Release historycaution

The package has 23 releases since June 2020, but none in the last 12 months; the latest release was about 15 months ago. This is meaningful maintenance concern despite the historically regular release interval.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Combined with no registry releases in the last 12 months, this points to slowing or paused maintenance.

Repo toolingcaution

The repository uses Composer and Phing, showing a defined build process, but no security scanning tools were detected. That is a transparency and maintenance gap, not a severe risk by itself.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations unclear. This is a moderate transparency gap for a package intended to be integrated into applications.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no reported audit findings. However, all four action references are unpinned, so their versions can change unexpectedly.