appsero/client

The package has a clear MIT license, a focused dependency set, release notes for this version, and organization backing. Repository security coverage is limited, and workflow dependencies are unpinned.

Latest v2.0.6

Packagist

66%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Are you affected? Scan for Free

Health Score Breakdown

Repo commit activity

The repository had zero commits and zero active maintainers in the last three months, indicating a meaningful recent maintenance gap.

Repo issue activity

There were no new or closed issues or pull requests in the last month, while three issues and two pull requests remain open; this supports a modest maintenance concern.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected, leaving security-maintenance coverage limited.

Security policy

The repository has no published security policy, reducing transparency for vulnerability reporting and response expectations.

Workflow audit

The single workflow was fully analyzed with no detected dangerous findings, but all three action references are unpinned, weakening build reproducibility and supply-chain hygiene.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2024-10397 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. appsero/client is vulnerable to Improper Access Control in versions 1.0 - 2.0.0.	1.0 - 2.0.0	High