Usable with caveats: it has a clear MIT license, tests, documentation, and a matching source repository, but maintenance appears to have stopped after August 2017. Treat it as legacy CakePHP 3.x code and verify compatibility before adopting it.
55%
Total Score
25
72
75
Only two releases were published, with the latest release about 9 years ago and no releases in the last 12 months. This is strong evidence that the package is legacy software with little ongoing maintenance.
There were no commits and no active maintainers in the last 3 months, consistent with the release history showing that development has stopped.
The registry namespace and repository owner match, and the repository is user-owned rather than organization-owned. This supports ownership consistency but offers limited evidence of ongoing project backing.
The repository has 9 stars and 2 forks, indicating a small adoption footprint. Popularity is only supporting evidence, but this provides little external backing for an otherwise inactive project.
Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a transparency gap, though it is less significant than the long maintenance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
cakephp/cakephp Version ^3.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.