cake-cms/app

Release historydanger

The package has had no release in over eight years and none in the last 12 months, making abandonment a substantial dependency risk. Its four-release history is limited but not inherently disqualifying.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap and leaving little evidence of current maintenance capacity.

Lifecycle scriptscaution

A post-autoload-dump install lifecycle script runs during Composer installation, adding a small operational review burden. The signal does not show that the script is harmful.

Repo popularitycaution

Zero stars and forks provide no meaningful community support signal. Popularity is only supporting evidence, but it reinforces the maintenance concern when combined with the inactive release and commit history.

Repo toolingcaution

The repository uses Make and Composer, showing basic build tooling, but it has no security scanning. The tooling is adequate for a small PHP application while the missing scanning is a modest hygiene gap.