cakephp/localized

Release historycaution

The package is mature, with 26 releases since December 2013, but it has had no registry release in the last 12 months, which raises a maintenance concern.

Repo bus factorcaution

All recent commits came from one contributor, creating concentration risk; organization ownership provides some ability to hand maintenance off.

Repo commit activitycaution

There was one commit in the last three months from one active maintainer, showing recent activity but a very low maintenance pace.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and response procedures undocumented.

Workflow auditcaution

The only workflow was fully analyzed with no audit findings or untrusted checkout and script-injection paths. However, all 8 action references are unpinned, so build inputs are less reproducible and should be reviewed.