spatie/laravel-menu

Clear licensing, repository tests, and no install-time scripts reduce adoption and operational concerns. Unpinned workflow images, absent security scanning, and no commits in three months leave modest maintenance and build-hygiene gaps.

Latest 4.2.2

Packagist

77%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, which is a maintenance concern despite the recent release and June repository push.

Repo tooling

Composer build tooling is present, but no security-scanning tools were detected, leaving a modest repository hygiene gap.

Security policy

No repository security policy was found, reducing transparency about how vulnerabilities should be reported and handled.

Workflow audit

All three workflows were analyzed with no untrusted checkout or script-injection paths, but the audit found a high-confidence unpinned container image and all seven action references are unpinned. These are build-reproducibility and workflow-hygiene concerns, not evidence that the package is unfit to use.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Sebastian De Deyne

Direct Dependencies

Dependency	Last Release	Score
spatie/menu Version ^3.0	—	—
illuminate/auth Version ^8.0\|^9.0\|^10.0\|^11.0\|^12.0\|^13.0	—	—
illuminate/support Version ^8.71\|^9.0\|^10.0\|^11.0\|^12.0\|^13.0	—	—
illuminate/contracts Version ^8.71\|^9.0\|^10.0\|^11.0\|^12.0\|^13.0	—	—