dereuromark/cakephp-cache

Repo bus factorcaution

One contributor made all commits in the last 3 months, giving the project a concentrated maintenance base. The package is still actively released, but continuity depends heavily on that maintainer.

Repo commit activitycaution

The repository had 1 commit in the last 3 months, showing some recent activity but a low maintenance pace. The recent release history partly offsets this concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The absence of scanning is a hygiene gap, not evidence of unsafe code by itself.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled. This is a process weakness rather than a direct dependency failure.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout, injection, or audit findings, but all 7 action references are unpinned. Unpinned actions weaken build reproducibility and supply-chain control.