The package is clearly licensed and includes practical installation and usage guidance. Its maintenance record is very old, and the project offers little evidence of ongoing support or security oversight.
38%
Total Score
100
75
75
The latest release was 10 years ago, and there were no releases in the last 12 months. This is strong evidence of abandonment risk for a dependency, with no newer release activity to compensate for it.
The repository has 0 stars, 0 forks, and 1 watcher. Popularity is only supporting evidence, but these values provide no indication of an active user or contributor community alongside the old release history.
The repository is not archived, which avoids the strongest abandonment signal, but it was last pushed 10 years ago. The repository's nominally active status does not offset the prolonged lack of updates.
No security policy was found in the linked repository. This is a transparency and maintenance gap, although it is less significant than the long period without a release.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
cakephp/cakephp Version ~3.0 | — | — |
cakephp/plugin-installer Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.