Yes the repository was forked from CakePHP v2, before the framework was moved as a composer dependency, so v2 contributors are shown as Passbolt contributors.
The last contribution was over 4 years ago (first contribution was 12 years ago), which would be the remnants of the fork.