apereo/phpcas

The project has clear licensing, release notes, tests, and organization backing. Recent development is thin and concentrated in one contributor, while all workflow actions are unpinned and no security policy is present.

Latest 1.6.2

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Are you affected? Scan for Free

Health Score Breakdown

Release history

The package is mature, with releases over 12 years, but only one release in the last 12 months and a median interval of about 11 months indicate a slow cadence.

Repo bus factor

All recent commits came from one contributor, creating continuity risk; organization ownership provides some capacity to hand maintenance to others.

Repo commit activity

Only one commit was recorded in the last three months from one active maintainer, indicating limited current development capacity.

Repo issue activity

There were no new or closed issues or pull requests in the last month, which is consistent with the thin recent activity seen elsewhere.

Security policy

The repository has no SECURITY.md or other declared security policy, leaving vulnerability reporting and response expectations unclear.

Vulnerabilities

Title	Versions	Severity
CVE-2022-39369 apereo/phpcas is vulnerable to Improper Validation of Specified Type of Input in versions 0.0.0 - 1.6.0.	0.0.0 - 1.6.0	High
CVE-2010-1618 apereo/phpcas is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 1.1.0.	0.0.0 - 1.1.0	Medium