Package Health

cakedc/cakephp-money

Tests, documentation, licensing, and release notes are all present, with organization backing and security scanning. The project is not archived, but its missing security policy leaves a modest transparency gap.

Latest 2.0.5PackagistPackagist

64%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

94

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historycaution

The package has 11 releases since June 2021, but its latest release was 16 months ago and it had no releases in the last 12 months. This indicates a meaningful maintenance slowdown, though the release history is established rather than abandoned outright.

Repo commit activitycaution

The repository had zero commits and zero active maintainers during the last 3 months. Combined with no registry releases in the last 12 months, this lowers confidence that fixes will arrive promptly.

Security policycaution

The repository has no security policy. This is a modest transparency gap for reporting vulnerabilities, but it is not evidence that the package is unsafe to use.

Workflow auditcaution

The only workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 7 referenced actions are unpinned, leaving avoidable workflow supply-chain exposure.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
moneyphp/money
Version ^4.0
cakephp/cakephp
Version ^5.0

Weekly Downloads

Info

Last Published
1 year ago
Created
5 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform