pieceofcake2/cakepdf
A clear README, tests, matching repository, and MIT licensing make the package straightforward to evaluate. Maintenance evidence is thin, with only one release and no commits in the last three months; the workflow also uses ten unpinned actions and grants top-level write access.
58%
Total Score
75
100
88
75
Health Score Breakdown
The package has only one release, published about 355 days after its first release, so there is little release history to demonstrate sustained maintenance.
There were no commits and no active maintainers in the last three months, leaving limited evidence of ongoing maintenance after the release.
Composer build tooling is present, but no security-scanning tool was detected, leaving a modest repository hygiene gap.
The repository has no security policy, which reduces transparency about how vulnerabilities should be reported and handled.
The workflow was fully analyzed with no untrusted checkouts or script-injection findings, but all 10 action references are unpinned and the workflow grants top-level write access; without an untrusted sink, these are hygiene concerns rather than severe risks.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 composer/installers Version * | — | — |
pieceofcake2/cakephp Version ^2.10 | — | — |
Weekly Downloads
Info
- Last Published
- 12 months ago
- Created
- 12 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.