ker0x/cakephp-push

Maintainerscaution

Only one account has registry publishing access, which creates limited publishing resilience. The linked repository is user-owned, so there is no organization backing shown to compensate for that narrow base.

Release historycaution

The package has six releases since 2016, but none in the last 12 months and the latest release was published in June 2021. This is a meaningful maintenance concern for a library dependency.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, indicating that ongoing development has effectively stopped. This is the strongest adoption concern even though the repository remains available.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. That is a modest transparency and maintenance gap rather than evidence that the package is unsafe.

Repository archivedcaution

The repository is not archived, and it was last pushed in November 2021. Its active status is positive, but the old last-push date is consistent with the package's stalled maintenance.