tobento/service-menu

Maintainerscaution

Only one account has registry publishing access. That is a limited publishing base and increases continuity risk if the maintainer becomes unavailable.

Project backingcaution

The repository owner is an individual account rather than an organization, so the single registry maintainer is not offset by visible organization backing.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although the latest release is recent, this indicates a current maintenance pause.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a small package this is a hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear. This lowers transparency but is not severe enough to make the release unfit by itself.