cakephp/database

cakephp/database 5.4.2 appears to be a healthy, mature dependency: it has over 11 years of release history, 337 releases including 23 in the last 12 months, a stable non-prerelease version, an active non-archived repository, recent commits from four contributors, and clear organization backing from CakePHP. The package is licensed under MIT, has a matching repository with tests and README documentation, and uses no install-time lifecycle scripts. The main reservations are the absence of a repository security policy and security-scanning tooling, plus no recent issue or pull-request activity; these are transparency and process gaps, but they are outweighed by the strong release and commit history.

Latest 5.4.2Packagist

Health Score Breakdown

Package scaffoldingcaution

The artifact includes a substantial README but no packaged tests or changelog; the repository does contain tests, which compensates for the missing packaged tests, while the absent changelog is a minor transparency gap.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected; the missing scanning process is a security-hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy, reducing the transparency of vulnerability reporting and response procedures.

View all 19 health checks

Maintainers

CakePHP Community

Direct Dependencies

Dependency	Last Release	Score
psr/log Version ^3.0	—	—
cakephp/core Version ^5.4.0	—	—
cakephp/event Version ^5.4.0	—	—
cakephp/chronos Version ^3.3	—	—
cakephp/datasource Version ^5.4.0	—	—