pieceofcake2/cakephp

Repo commit activitycaution

There were 0 commits and 0 active maintainers in the last 3 months, which is a material maintenance and abandonment concern for a framework dependency.

Repo issue activitycaution

Only one issue is open and there has been no new or closed issue or pull-request activity in the last month, offering little evidence of current maintenance.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, making vulnerability reporting and response expectations less clear.

Workflow auditcaution

All 13 analyzed action references are unpinned, and two high-confidence findings identify unpinned container images; the sole workflow also grants top-level write access, creating avoidable build-integrity risk.