mirko-pagliai/cakephp-essentials

Project backingcaution

The repository is owned by an individual rather than an organization, so the one-person contributor base represents a real continuity risk rather than normal organization publishing hygiene.

Repo bus factorcaution

One contributor made all 20 commits in the last 3 months, giving the project a concentrated bus factor. The active release cadence compensates for abandonment concerns only partly.

Repo commit activitycaution

The repository recorded 20 commits in the last 3 months, showing active development. However, all activity came from one active maintainer, so continuity depends heavily on that person.

Security policycaution

No repository security policy was found. This is a modest transparency gap for a library, but it is outweighed by the active maintenance, tests, and clear licensing.

Workflow auditcaution

The single workflow has read-only permissions and no untrusted checkouts, injection findings, or audit failures. However, all 12 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.