It has clear licensing, release notes, repository tests, and organization backing. Recent commit activity is quiet, and CI uses an unpinned container image, leaving maintenance and build-reproducibility concerns.
72%
Total Score
75
100
88
100
The package is mature, with releases since October 2020 and a latest release in December 2025, but only one release appeared in the last 12 months, indicating a slower cadence.
The repository recorded zero commits and zero active maintainers in the last three months, which is a meaningful maintenance concern, although the recent release and pull-request activity provide partial compensation.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency gap.
Both workflows were analyzed without untrusted checkouts or script injection, but the audit found high-confidence unpinned container images, including a floating latest tag, which weakens build reproducibility.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
laminas/laminas-cache Version ^4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.