kba-team/phinx-cake2

Release historycaution

The package has existed for about 4 years and 8 months, with 7 releases and a latest release in January 2026, but only 1 release in the last 12 months. This supports ongoing availability while indicating a slow cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. Although a recent release provides some compensating evidence, the current maintenance activity is quiet.

Repo toolingcaution

Composer is used for the build, which fits the package ecosystem, but no security scanning tools were detected. The missing scanning is a modest transparency and hygiene gap.

Security policycaution

The repository has no security policy. This does not show a security defect, but it leaves vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All 7 analyzed action references are unpinned, creating avoidable workflow supply-chain drift. The audit analyzed the only workflow successfully and found no untrusted checkout, injection, dangerous trigger, or high-confidence finding, which limits the severity to caution.