cakephp/validation

cakephp/validation 5.4.2 appears to be a healthy, mature dependency with a long release history dating back over 11 years, 337 releases, 12 releases in the last 12 months, a stable major version, and a recent release. It is backed by a non-archived organization-owned repository, has current commit activity from three contributors, a balanced bus factor, an explicit MIT license, and a repository that clearly matches the package. The main limitations are the absence of packaged tests, a changelog, security scanning, and a security policy; however, repository tests are present, the package has no install-time lifecycle scripts, and the remaining gaps are transparency and tooling concerns rather than evidence of abandonment or unfitness.

Latest 5.4.2

Packagist

88%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo issue activity

No new or closed issues or pull requests were recorded in the last month, which is a mild activity gap. Because recent commits and releases are present, this does not by itself indicate abandonment.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a security-process gap, though it is not evidence that the package is unhealthy or abandoned.

Security policy

The repository has no security policy, reducing transparency around vulnerability reporting and response expectations. This is a genuine but limited process gap for an otherwise actively maintained package.