Package Health

kongka/users

It includes a substantial README, tests, and changelog, with a clear MIT license. The repository remains available and the package has no install-time scripts, but its maintenance safeguards are thin.

Latest 11.1.0PackagistPackagist

38%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

25

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

80

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historydanger

The last release was nearly four years ago, and there were no releases in the last 12 months. Although the package has 76 releases, activity is concentrated on its initial release day and does not show ongoing maintenance.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the long release gap and indicating likely abandonment risk.

Repo issue activitycaution

There was no new or merged pull-request activity in the last month, and no issue activity was recorded. The null open-issue count is unknown, but the observed inactivity adds maintenance concern.

Security policycaution

The linked repository has no published security policy, leaving vulnerability reporting and response expectations undocumented for a package handling authentication and user accounts.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all 7 action references are unpinned. That leaves build inputs exposed to changing upstream code despite the otherwise clean audit.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

CakeDC
Others

Direct Dependencies

DependencyLast ReleaseScore
cakedc/auth
Version ^7.0
—
—
cakephp/cakephp
Version ^4.0
—
—
cakephp/authorization
Version ^2.0.0
—
—
cakephp/authentication
Version ^2.0.0
—
—

Weekly Downloads

Info

Last Published
4 years ago
Created
14 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform