3xw/cakephp-app

Release historydanger

The package has 70 releases, but none in the last 12 months and its latest release was in November 2021. This long release gap is strong evidence of abandonment risk.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months. Combined with the old latest release, this indicates that active maintenance has effectively stopped.

Dependency profilecaution

The application declares 13 runtime dependencies spanning CakePHP, AWS, authentication, and plugins. This is a substantial dependency surface to maintain, but the signal does not show it is uncontrolled.

Repo toolingcaution

Composer is used as the build tool, but no security-scanning tool is configured. That weakens ongoing vulnerability oversight, especially for an application with a broad runtime dependency set.

Security policycaution

The repository has no security policy. This leaves no documented path for reporting or handling vulnerabilities and adds to the transparency concerns of an inactive project.