It includes a substantial README, tests, and changelog, with a clear MIT license. The repository remains available and the package has no install-time scripts, but its maintenance safeguards are thin.
38%
Total Score
25
80
75
The last release was nearly four years ago, and there were no releases in the last 12 months. Although the package has 76 releases, activity is concentrated on its initial release day and does not show ongoing maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the long release gap and indicating likely abandonment risk.
There was no new or merged pull-request activity in the last month, and no issue activity was recorded. The null open-issue count is unknown, but the observed inactivity adds maintenance concern.
The linked repository has no published security policy, leaving vulnerability reporting and response expectations undocumented for a package handling authentication and user accounts.
The single workflow was fully analyzed with no dangerous triggers or audit findings, but all 7 action references are unpinned. That leaves build inputs exposed to changing upstream code despite the otherwise clean audit.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
cakedc/auth Version ^7.0 | — | — |
cakephp/cakephp Version ^4.0 | — | — |
cakephp/authorization Version ^2.0.0 | — | — |
cakephp/authentication Version ^2.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.