ishanvyas22/cakephpvue-spa

Project backingcaution

The package and repository are owned by the same individual account rather than an organization, so there is no organization-level backing shown to offset the thin maintenance evidence.

Release historycaution

The package has 14 releases but none in the last 12 months; its latest release was in November 2021, nearly five years ago. This is a meaningful maintenance concern despite its historically regular early release cadence.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. Combined with no registry releases since November 2021, this indicates weak evidence of ongoing maintenance.

Security policycaution

The repository has no security policy. That is a transparency gap for reporting and handling vulnerabilities, although it is not evidence of a vulnerability itself.

Workflow auditcaution

The single workflow was fully audited with no dangerous findings or untrusted execution paths. Its only action reference is unpinned, so the workflow has a modest reproducibility and supply-chain hygiene gap.