cakephp/utility

cakephp/utility 5.4.2 appears to be a healthy dependency: it has a long release history dating back more than 11 years, 338 releases, 14 releases in the last 12 months, a stable non-prerelease version, no registry deprecation, and an active non-archived organization-backed repository. Recent commits involve four maintainers with no severe concentration risk, and the package has a clear README, matching repository, MIT license, and no install-time lifecycle scripts. The main reservations are that neither the artifact nor repository exposes tests or a changelog, repository issue and pull-request activity was absent in the last month, and no dedicated security-scanning tooling was detected; these are transparency and process gaps, but they are outweighed by the strong release and maintenance record.

Latest 5.4.2

Packagist

88%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

100

Health Score Breakdown

Package scaffolding

A substantial README is present and the repository matches the artifact, but neither the package nor repository contains tests or a changelog. This is a genuine documentation and verification gap, though it does not outweigh the package's other maintenance evidence.

Repo issue activity

No new or closed issues or pull requests were recorded in the last month, while issue and pull-request totals are unavailable. This is a modest activity-visibility gap, partially offset by recent commits and frequent releases.

Repo tooling

Composer build tooling is present, but no security-scanning tool was detected. The missing security automation is a process gap, though the package's active maintenance and repository security policy provide compensating evidence.