Usable with caveats: the package is licensed, clearly packaged, and not deprecated or archived. However, its last release and repository activity were in December 2021, with no recent commits, so maintenance and compatibility risk are significant.
58%
Total Score
50
100
78
88
The package and repository are consistently owned by the same individual account, which supports provenance. Individual ownership also suggests a narrower maintenance base than organization-backed projects.
The package has eight releases since April 2020, but none in the last 12 months and its latest release was in December 2021. This long period without a release materially increases compatibility and abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months. Combined with the December 2021 last push, this is the strongest evidence that ongoing maintenance may have stopped.
There are no open issues or pull requests and no activity in the last month. While the clean queue is positive, the absence of recent interaction provides little evidence of active maintenance.
The repository has zero stars and forks and one watcher, indicating very limited external adoption or review. Popularity is supporting evidence rather than decisive proof, so this adds a modest maturity concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
cakephp/cakephp Version ^4.0 | — | — |
cakephp/migrations Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.