pcuser42/cakephp-webpack-asset-loader

Release historycaution

There have been five releases, but none in the last 12 months and the latest registry release was about two years ago, which raises maintenance and abandonment concerns.

Repo bus factorcaution

All two recent commits came from one contributor, leaving maintenance highly concentrated and creating a meaningful continuity risk for this user-owned project.

Repo commit activitycaution

The repository had two commits in the last three months, showing some recent activity, but this is limited and does not fully offset the lack of recent registry releases.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear; this is a transparency gap but not severe on its own.

Workflow auditcaution

The single workflow uses read-only permissions and has no dangerous audit findings, but both action references are unpinned, weakening build reproducibility and update safety.