dereuromark/cakephp-audit-stash
The package has clear documentation, tests, licensing, and frequent releases. Maintenance is concentrated in one contributor, security guidance is absent, and all workflow actions are unpinned.
68%
Total Score
50
100
94
75
Health Score Breakdown
The repository is owned by an individual rather than an organization, so the concentrated recent contribution profile is not offset by visible organizational handoff capacity.
One contributor made 100% of the recent commits, leaving maintenance dependent on a single individual with no demonstrated handoff capacity.
Only two commits were made in the last three months, all by one active maintainer. Recent work exists, but the low volume limits evidence of sustained maintenance capacity.
Composer build tooling is present, but no security-scanning tool was detected. For an audit and compliance-oriented plugin, that is a modest transparency gap.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 cakephp/orm Version ^5.3.0 | — | — |
sebastian/diff Version ^6.0 || ^7.0 || ^8.0 || ^9.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 11 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.