The package includes tests, a clear README, release notes, and a license. Its small recent activity footprint and unpinned CI actions leave maintenance and build-reproducibility concerns.
70%
Total Score
50
90
The package has existed for over 6 years with 10 releases, but only one release in the last 12 months and a median interval of about 233 days indicate a slow cadence.
All recent commits came from one contributor, so maintenance depends heavily on a single person; the repository owner is an individual rather than an organization.
There was one commit in the last 3 months from one active maintainer, which shows recent attention but leaves limited evidence of sustained maintenance capacity.
The single workflow was fully analyzed with no dangerous triggers, sinks, or audit findings, but all 7 action references are unpinned, reducing build reproducibility.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
cakephp/cakephp Version ^5.1.1 | — | — |
dereuromark/cakephp-ide-helper Version ^2.11 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.