It includes tests, a detailed README, and a clear MIT license. Its lone release and inactive repository leave compatibility and maintenance questions for a CakePHP dependency.
44%
Total Score
25
100
78
83
This package has only one release, published in January 2021, and none in roughly five years and eight months. That strongly raises abandonment and compatibility risk for a framework plugin.
There were zero commits and zero active maintainers in the last three months, consistent with a repository that has been inactive since January 2021. This is a substantial maintenance and abandonment concern.
The repository is owned by an individual user rather than an organization. That does not imply poor health, but it provides less visible institutional backing for a package already showing prolonged inactivity.
The repository has only 4 stars, 1 fork, and 1 watcher. Popularity is supporting evidence rather than decisive, but these low levels provide little external evidence of ongoing adoption or review.
Composer build tooling is present, but no security scanning tool was detected. This is a modest hygiene gap that adds to, but does not independently establish, maintenance risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
cakephp/cakephp Version 4.* | — | — |
firebase/php-jwt Version ^4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.