The package is clearly documented, tested, MIT-licensed, and its repository matches the package. Its small dependency set and lack of install-time scripts reduce practical adoption risk, but they do not offset the project's end-of-life status.
8%
Total Score
0
50
100
Packagist marks the entire package as abandoned, with no replacement because the functionality was incorporated into CakePHP. This directly makes taking a new dependency on this release unsuitable.
The latest release was published in March 2016, and there have been no releases in the last 12 months. More than 10 years without a release is strong evidence of abandonment for a framework integration.
The repository had zero commits and zero active maintainers in the last 3 months. This confirms the long-term lack of maintenance rather than merely showing a quiet release cadence.
The linked repository is archived, and its last push was in July 2017. An archived source project is no longer an actively maintained dependency.
The repository uses Composer, showing basic build tooling, but no security scanning tools were detected. The missing scanning is a minor transparency gap, while the build tooling is a modest positive.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
cakephp/cakephp Version ~3.0 | — | — |
zendframework/zend-diactoros Version ~1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.