SmartMenus

United Kingdom · www.smartmenus.org · 8 vendors

Vadikom Web Ltd. develops SmartMenus, an advanced jQuery website menu plugin. It provides mobile-first, responsive, and accessible list-based menus designed to work across various devices and browsers. The plugin offers features like touch, mouse, and keyboard navigation support, and is optimized for cross-browser compatibility.

Resilience scores

Technology vendors

Services catalogue

1 service in catalogue across 1 category; runs on 8 sub-vendors.

Insights

Last updated 2026-08-11 · revision 2

8 direct vendors, 110 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 3/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

SmartMenus exhibits low migration readiness. The internal tech stack, heavily reliant on WordPress, PHP, and MySQL, suggests a traditional, potentially monolithic architecture that is not inherently cloud-native, containerized, or microservices-oriented. This would necessitate significant re-platforming or re-architecting efforts for a successful cloud migration, increasing complexity and cost. A critical lack of data regarding the company's financial stability (revenue concentration, growth history) makes it impossible to assess their ability to fund a potentially costly and resource-intensive migration. The regulatory environment is not specified, introducing an unknown risk factor that could impact migration strategies. While 'Total Vendors: 0' is stated, the company consumes 'Total Services: 9' from entities in various countries. The nature and integration of these services are unknown, posing a potential vendor lock-in risk if they are deeply embedded or provided by a concentrated number of actual vendors, despite geographic diversity of their HQs. This ambiguity suggests unmanaged dependencies that could complicate migration. On the positive side, no specific data residency requirements are noted, which offers flexibility in choosing cloud regions and deployment strategies without immediate geographical constraints.

Compliance

4 in-scope frameworks identified; showing 3.

UK PECR — Non-Compliant

PECR implements the EU ePrivacy Directive in UK law and governs the use of cookies, electronic marketing, and communications data. SmartMenus' website uses cookies (confirmed in the privacy policy) and operates a newsletter subscription service. The 2004 privacy policy acknowledges cookie use but provides no compliant consent mechanism — users are simply told they can decline cookies via browser settings, which does not meet the PECR/UK GDPR standard of prior informed consent for non-essential cookies. The newsletter subscription also requires PECR-compliant opt-in consent. Risk is Medium rather than High because: (1) the ICO tends to prioritize larger-scale PECR violations; (2) the company is a micro-enterprise; (3) the newsletter appears to be opt-in based on the website description.

Evidence: https://www.smartmenus.org/about/vadikom/privacy-policy/, https://www.smartmenus.org, https://ico.org.uk/for-organisations/direct-marketing-and-privacy-and-electronic-communications/guide-to-pecr/, https://www.legislation.gov.uk/uksi/2003/2426/contents/made

Open Source Software Licensing Compliance — Assessment Required

SmartMenus distributes a jQuery-based open-source plugin. Open-source license compliance is a legal obligation for software distributors. The product depends on jQuery (MIT License) and is itself distributed under a license that must be clearly stated and adhered to. Failure to properly comply with open-source licenses (e.g., attribution requirements, license notice inclusion) can result in copyright infringement claims. Risk is Medium because: (1) open-source license violations are increasingly litigated; (2) the product is widely used by developers globally; (3) no license compliance audit evidence was found. The risk is mitigated if the project uses permissive licenses (MIT/BSD) consistently.

Evidence: https://www.smartmenus.org/download/, https://www.smartmenus.org, https://opensource.org/licenses/MIT

ISO 27001 (source) — Assessment Required

ISO 27001 is an internationally recognized information security management standard applicable to any organization that handles information assets. While not legally mandatory, it is considered best practice for technology companies. SmartMenus/Vadikom Web Ltd. handles some personal data (forum users, newsletter subscribers, contact form submissions) and distributes software used by a global developer community. The risk of not having ISO 27001 is Low because: (1) the company appears to be a micro-enterprise with minimal data processing; (2) the product is open-source and client-side, reducing supply chain security concerns; (3) there are no contractual obligations evident that would require ISO 27001 certification. However, the complete absence of any documented information security practices is a gap worth noting.

Evidence: https://www.smartmenus.org/about/vadikom/privacy-policy/, https://www.smartmenus.org, https://www.iso.org/isoiec-27001-information-security.html

Financials

Three-year financials

Financial Resilience Score: 4/10

Vadikom Web Ltd. (operator of SmartMenus) is a Bulgarian micro-studio with over 22 years of continuous operation, suggesting sustained viability at a small scale. Its cost base is very low, being effectively a one-person operation based in Plovdiv, Bulgaria, with minimal overhead and likely no significant debt. The SmartMenus jQuery plugin has strong developer-community recognition, giving the business disproportionate visibility relative to its size. However, resilience is materially constrained by extreme key-person risk (the entire enterprise depends on founder Vasil Dinkov), narrow and lumpy monetisation (free MIT-licensed core product, with revenue derived from premium support and bespoke client work), and technology-obsolescence risk as jQuery declines in favor of modern frameworks like React, Vue, and Svelte. Release cadence has slowed, and there is no visible team depth or succession plan. Additionally, the lack of any public financial disclosure prevents meaningful credit or financial due diligence. Combined, these factors suggest a moderate-to-low resilience profile: the business is likely stable at its current micro-scale, but is highly vulnerable to founder-related and technology-shift shocks.

Key strengths: Very low cost base as a one-person studio in low-cost Plovdiv, Bulgaria, 22+ year operating history (since 2003) indicating sustained viability, Strong developer-community reputation for SmartMenus jQuery plugin, Likely debt-free small business profile

Risk factors: Extreme key-person risk centered on founder Vasil Dinkov, Technology obsolescence risk as jQuery declines vs. modern frameworks, Narrow monetisation: free MIT-licensed core, revenue from premium support and bespoke client work, No public financial disclosure, preventing due diligence, Slowing release cadence and no visible roadmap execution

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report