fm-labs/cakephp-cupcake

The package has a clear README, tests, a matching source repository, and a stable release line. Its release and commit activity has since slowed substantially, while licensing and security-policy transparency remain weak.

Latest 5.0.7

Packagist

60%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

License

Neither the package nor the linked repository contains a license declaration or license file. This creates a real legal and transparency concern for adoption.

Release history

The project has 42 releases since March 2016, but none in the last 12 months; the latest release was in August 2025. That recent release partly offsets the otherwise clear slowdown, but ongoing maintenance is uncertain.

Repo commit activity

The repository had zero commits and zero active maintainers in the last three months. The August 2025 release push provides some compensating evidence, but current maintenance capacity is still unclear.

Repo issue activity

There are no open issues or pull requests, but there was also no issue or pull-request activity in the last month. This is consistent with a quiet project, though it provides little evidence of active support.

Repo tooling

Composer is used as the build tool, which fits the package ecosystem, but no security scanning tools are reported. The missing scanning is a hygiene gap rather than evidence of abandonment.