Public-quality passkey / WebAuthn authentication plugin for CakePHP 5
62%
Total Score
caution
A brand-new release has no sustained commit history, while its workflows use unpinned actions and images.
This is the first release, published today, so there is no release history or cadence demonstrating sustained maintenance yet.
The repository has zero commits and zero active maintainers in the last three months. Because the package is newly released, this is limited evidence rather than proof of abandonment, but sustained maintenance is unestablished.
Composer build tooling is present, but no security scanning tool was detected; this is a modest transparency and hygiene gap for an authentication plugin.
Version 0.1.0 is not a stable major release, which signals an early-stage API and greater compatibility risk for adopters.
All 11 action references are unpinned, and the audit found a high-confidence unpinned container image plus a release workflow using trusted publishing; the low-confidence cache finding adds little weight.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
cakephp/cakephp Version ^5.2 | — | — |
cakephp/migrations Version ^5.0 | — | — |
web-auth/webauthn-lib Version ^5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.