The package is clearly scoped and backed by a matching repository, tests, a recent release, and a permissive license. Unpinned workflow actions and limited security controls add maintenance risk for a project with a thin contributor base.
68%
Total Score
50
100
93
75
Only one registry account has publish access. That is not evidence of abandonment by itself, but it leaves little publishing redundancy for this user-owned project.
The repository is owned by a user rather than an organization, so the single-contributor and single-publisher concentration is not offset by visible organizational backing.
One contributor made all three recent commits, so maintenance depends entirely on a single active person and has a low bus factor.
The repository recorded three commits in the last three months, showing recent activity but a modest maintenance pace.
Composer build tooling is present, but no security scanning tools were detected, leaving a notable security-hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
robinn/cache Version ^2.7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.