The CodeIgniter framework
30%
Total Score
unhealthy
The package is deprecated and maintenance has stopped, despite a reputable repository and otherwise clear packaging.
Packagist marks the entire package as abandoned and names codeigniter/framework as its replacement. This is a direct adoption risk for a new dependency.
The repository recorded zero commits and zero active maintainers in the last 3 months. That indicates maintenance has effectively stopped, although the repository is not archived.
The package has 26 releases but none in the last 12 months; its latest release was on January 14, 2024. The long history is outweighed by the current release gap.
Only one new issue appeared in the last month, with no issues or pull requests closed or merged. This provides little evidence of active maintenance.
Composer is used for builds, but no security scanning tools were detected. The build setup is clear, though security verification coverage is limited.
| Title | Versions | Severity |
|---|---|---|
CVE-2016-10131 bcit-ci/codeigniter is vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') in versions 0.0.0 - 3.1.3. | 0.0.0 - 3.1.3 | Critical |
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.