The package has a long release history, regular recent releases, tests in the repository, and a matching source repository. Recent work is limited to two commits from one contributor, and the declared LGPL-3.0 differs from the LGPL-2.1 license detected in the artifact.
70%
Total Score
75
100
83
50
The artifact contains a license file, but it identifies LGPL-2.1 while the manifest declares LGPL-3.0; the mismatch creates licensing uncertainty despite the package being licensed.
All two recent commits came from one contributor, so current maintenance depends on a single active person and has limited visible redundancy.
The repository received two commits in the last three months, showing some ongoing work but a low recent maintenance rate.
Composer is used as the build tool, but no security scanning tool was detected; the missing scanning is a modest transparency and maintenance gap.
The repository has no security policy, leaving vulnerability reporting and handling expectations undocumented.
| Title | Versions | Severity |
|---|---|---|
CVE-2024-47173 aimeos/ai-admin-graphql is vulnerable to Privilege Context Switching Error in versions 2024.04.1 - 2024.07.2. | 2024.04.1 - 2024.07.2 | Medium |
CVE-2024-39324 aimeos/ai-admin-graphql is vulnerable to Incorrect Authorization in versions 2022.04.1 - 2022.10.10, 2023.04.1 - 2023.10.6 and 2024.04.1 - 2024.04.1. | 2022.04.1 - 2022.10.102023.04.1 - 2023.10.62024.04.1 - 2024.04.1 | Low |
CVE-2024-39323 aimeos/ai-admin-graphql is vulnerable to Incorrect Authorization in versions 2022.04.1 - 2022.10.10, 2023.04.1 - 2023.10.6 and 2024.04.1 - 2024.04.6. | 2022.04.1 - 2022.10.102023.04.1 - 2023.10.62024.04.1 - 2024.04.6 | High |
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
nyholm/psr7 Version ~1.2 | — | — |
aimeos/aimeos-core Version 2026.04.* | — | — |
webonyx/graphql-php Version ~15.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.