ovenlab/cakephp-pwa

Release historycaution

This package is only 44 days old and has one release, so there is not yet enough history to demonstrate sustained maintenance or compatibility stability.

Repo bus factorcaution

All 12 recent commits came from one contributor, leaving maintenance dependent on a single individual. Organization ownership provides some backing, but no second active contributor is shown.

Security policycaution

The repository has no security policy, leaving users without a documented route or process for reporting security issues. This is a transparency and maintenance gap for a plugin handling web push functionality.

Version stabilitycaution

v1.0.0 is a stable, non-prerelease version, which is positive, but the package has only one release and therefore has not established a track record across versions.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout or script-injection findings, but all 5 action references are unpinned. That weakens build reproducibility and supply-chain hygiene without making the release unfit on its own.