The repository includes tests, a clear MIT license, and no install-time scripts. Workflow references are all unpinned, and the repository lacks a security policy and security scanning, leaving meaningful maintenance and build-hygiene concerns.
62%
Total Score
33
100
88
75
The repository recorded zero commits and zero active maintainers in the last three months. This is strong evidence of currently stalled maintenance, despite the recent repository push timestamp.
The repository is owned by an individual rather than an organization, so there is no visible organizational backing to compensate for the thin maintenance base.
The package has existed for about 12 years with 14 releases, but it has had no registry release in the last 17 months. That indicates a meaningful slowdown, although the long history provides some maturity evidence.
There are 18 open pull requests, with two new in the last month but none merged, and no new issues or closed issues during that month. The unresolved queue suggests limited throughput.
Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than evidence of abandonment by itself.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
cakephp/cakephp Version ^5.0.0 | — | — |
league/flysystem Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.