Risky to adopt: this release appears abandoned, with no registry releases or repository commits for about five years. The matching repository, tests, MIT license, and safe workflows provide useful transparency, but they do not offset the lack of ongoing maintenance and security documentation.
42%
Total Score
50
50
78
75
Only three releases were published, all in July 2021, with no release in about five years. That long release gap is strong evidence of a project that is no longer actively maintained.
The repository had zero commits and zero active maintainers in the last three months, consistent with no observed activity for about five years. This is a severe abandonment risk for a framework application template.
The application skeleton declares nine runtime dependencies, including framework, authentication, CRUD, and search components. This is a meaningful dependency surface for an old template, though the signal does not show that the dependencies are unsafe.
The repository has no stars or forks and only one watcher, providing little community evidence of use or review. Popularity is supporting evidence rather than a verdict, so this reinforces but does not determine the maintenance concern.
Composer is used for builds, providing basic dependency tooling, but no security scanning tool is configured. The missing scanning is a transparency and maintenance gap for a package with several runtime dependencies.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
cakedc/users Version ^9.2 | — | — |
cakephp/cakephp Version ~4.2.0 | — | — |
3xw/cakephp-utils Version 4.* | — | — |
cakephp/migrations Version ^3.0 | — | — |
friendsofcake/search Version ^6.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.