cakephp/orm

cakephp/orm 5.4.2 appears to be a healthy, mature dependency. It has more than 11 years of release history, 336 releases, 17 releases in the last 12 months, and a recent stable release, while the linked organization-owned repository is active, unarchived, correctly associated with the package, and has five active contributors in the last three months. The artifact is clearly licensed, has a substantial README, no install-time lifecycle scripts, and a focused dependency profile. The main limitations are the absence of packaged tests and a changelog, no configured security scanning or security policy, and limited recent issue activity; however, repository tests, recent commits, continued releases, and organization backing substantially compensate for these gaps.

Latest 5.4.2

Packagist

92%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo issue activity

Only one issue is open and there was no issue or pull-request activity in the last month, which is a modest transparency and responsiveness gap, though it is partly offset by recent commits and releases.

Repo tooling

Composer build tooling is present, but no security scanning tools are configured, leaving a security-process hygiene gap.

Security policy

The repository has no SECURITY.md or other detected security policy, reducing transparency about vulnerability reporting and response.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

CakePHP Community

Direct Dependencies

Dependency	Last Release	Score
cakephp/core Version ^5.4.0	—	—
cakephp/event Version ^5.4.0	—	—
cakephp/utility Version ^5.4.0	—	—
cakephp/database Version ^5.4.0	—	—
cakephp/collection Version ^5.4.0	—	—