The source includes tests, release notes, a matching repository, and organization ownership, with Composer tooling and Dependabot supporting upkeep. GitHub Actions use four unpinned references and no security policy is published.
58%
Total Score
75
93
67
The package has 9 releases since February 2020 but none in the last 12 months, with the latest released in September 2022. This long release gap is a meaningful maintenance concern.
There were no commits and no active maintainers during the last three months. Although the repository was pushed in February 2025, the current activity still suggests slow maintenance.
The repository has no published security policy. This is a transparency gap, though Dependabot provides some compensating security-maintenance tooling.
Both workflows were analyzed without audit findings, and the pull_request_target workflow has no untrusted checkout or script-injection sink. However, all four action references are unpinned, which is a supply-chain hygiene concern.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
bedita/i18n Version ^4.1.4 | — | — |
cakephp/cakephp Version ~4.4.1 | — | — |
bedita/web-tools Version ^3.9.0 | — | — |
cakephp/plugin-installer Version ^1.3 | — | — |
mobiledetect/mobiledetectlib Version ^2.8 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.