Its small dependency surface and matching repository make adoption straightforward. Depend on it with awareness that long-term maintenance is not yet established and workflow references need tighter pinning.
68%
Total Score
50
100
93
75
This is the first release, published 0 days ago, so there is no release track record yet. The repository and release are newly established rather than demonstrably abandoned.
The repository shows 0 commits and 0 active maintainers in the last 3 months, leaving maintenance capacity unproven. Because the package is 0 days old, this is evidence of limited history rather than clear abandonment.
The only workflow was fully analyzed with no dangerous triggers, sinks, or audit findings, but all 10 action references are unpinned. That leaves avoidable build-integrity exposure and is a hygiene concern.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
cakephp/cakephp Version ^5.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.