Package Health

dereuromark/cakephp-passkeys

Public-quality passkey / WebAuthn authentication plugin for CakePHP 5

Latest 0.1.0PackagistPackagist

62%

Total Score

caution

A brand-new release has no sustained commit history, while its workflows use unpinned actions and images.

Health Score Breakdown

Release historycaution

This is the first release, published today, so there is no release history or cadence demonstrating sustained maintenance yet.

Repo commit activitycaution

The repository has zero commits and zero active maintainers in the last three months. Because the package is newly released, this is limited evidence rather than proof of abandonment, but sustained maintenance is unestablished.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected; this is a modest transparency and hygiene gap for an authentication plugin.

Version stabilitycaution

Version 0.1.0 is not a stable major release, which signals an early-stage API and greater compatibility risk for adopters.

Workflow auditcaution

All 11 action references are unpinned, and the audit found a high-confidence unpinned container image plus a release workflow using trusted publishing; the low-confidence cache finding adds little weight.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Mark Scherer

Direct Dependencies

DependencyLast ReleaseScore
cakephp/cakephp
Version ^5.2
—
—
cakephp/migrations
Version ^5.0
—
—
web-auth/webauthn-lib
Version ^5.0
—
—

Weekly Downloads

Info

Last Published
3 days ago
Created
3 days ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform