erwane/cakephp-token

Project backingcaution

The package and repository are consistently owned by the same individual account, so the source relationship is clear; however, there is no organizational backing to offset the single-maintainer risk.

Repo bus factorcaution

All two recent commits came from one contributor, so maintenance depends heavily on a single person and could be vulnerable to abandonment.

Repo commit activitycaution

There were two commits in the last three months, showing some recent maintenance, but activity is light and does not indicate a highly active project.

Repo toolingcaution

The repository uses Composer but reports no security-scanning tools, leaving automated vulnerability detection less evident.

Security policycaution

The repository has no security policy, which reduces transparency about how vulnerabilities should be reported, though this is not by itself evidence of unsafe code.