Package Health

josegonzalez/cakephp-entity

Unfit to use for new dependencies: the package is deprecated and its source repository is archived. Its last release was over 11 years ago, with no recent commits, despite having tests, a clear MIT license, and a usable README.

Latest 3.0.2PackagistPackagist

18%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

0

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

61

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Using this package? Scan for Free

Health Score Breakdown

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement provided. This is a direct warning against taking a new dependency on the release.

Release historydanger

Only two releases are recorded, with the latest published over 11 years ago and none in the last 12 months. This is strong evidence of abandonment rather than merely a slow release cadence.

Repo commit activitydanger

The repository had no commits and no active maintainers in the last 3 months. Together with the archive status and old release history, this confirms that current maintenance capacity is absent.

Repository archiveddanger

The linked repository is archived, and it was last pushed about 8 years ago. Archived source strongly indicates that maintenance and fixes are no longer expected.

Repo toolingcaution

Composer is used for builds, but no security scanning tooling is present. The missing scanning is a modest transparency gap, while the absence of build tooling is not a concern.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Yosuke Basuke Suzuki
Jose Diaz-Gonzalez

Direct Dependencies

DependencyLast ReleaseScore
composer/installers
Version *
—
—

Weekly Downloads

Info

Last Published
11 years ago
Created
13 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform