The package includes a clear README, MIT licensing, and a test suite, but its own documentation describes the code as alpha and limited in scope. Those positives do not offset the long-term maintenance and adoption risk.
8%
Total Score
50
50
Packagist marks the entire package as abandoned, with no replacement provided. This is a direct warning against taking a new dependency on the release.
The latest release was published in July 2017, and there were no releases in the last 12 months. This indicates roughly nine years without a release and materially increases abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's abandoned status.
The linked repository is archived, despite being last pushed in October 2023, so it is no longer an actively maintained source for this package.
Version 0.0.4 is not a stable major release, and the package README describes the code as alpha with limited functionality. That makes compatibility and long-term suitability less certain.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
cakephp/cakephp Version >=3.4 <4.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.