Package Health

bytefury/crater

The package includes tests, release notes, a substantial source tree, and clear organizational backing. Its last registry release was about four years ago, repository activity has stopped, and the artifact’s AGPL-3.0 license conflicts with its MIT declaration.

Latest 6.0.6PackagistPackagist

42%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

78

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Are you affected? Scan for Free

Health Score Breakdown

Release historydanger

The latest release was published about four years ago, with no releases in the last 12 months. That is a substantial abandonment concern for a full application package.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, and the last recorded push was about two years ago. This is strong evidence that maintenance has effectively stopped.

Licensecaution

The artifact contains a license file, but it identifies AGPL-3.0 while the manifest declares MIT. This unresolved mismatch creates a meaningful legal and transparency concern.

Lifecycle scriptscaution

Install-time Composer scripts run post-autoload and project-creation actions. Such scripts are expected for an installable Laravel application, but they increase installation sensitivity.

Repo issue activitycaution

There were no new or closed issues and no merged pull requests in the last month, while 386 issues remain open. This indicates little current project attention.

Vulnerabilities

TitleVersionsSeverity
CVE-2022-0372
bytefury/crater is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 6.0.0.
0.0.0 - 6.0.0
Medium
CVE-2022-0203
bytefury/crater is vulnerable to Improper Access Control in versions 0.0.0 - 6.0.2.
0.0.0 - 6.0.2
Medium
CVE-2022-0242
bytefury/crater is vulnerable to Unrestricted Upload of File with Dangerous Type in versions 0.0.0 - 6.0.
0.0.0 - 6.0
High
CVE-2021-4080
bytefury/crater is vulnerable to Unrestricted Upload of File with Dangerous Type in versions 0.0.0 - 6.0.0.
0.0.0 - 6.0.0
High

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
laravel/ui
Version ^3.0
—
—
doctrine/dbal
Version ^2.10
—
—
predis/predis
Version ^1.1
—
—
laravel/tinker
Version ^2.0
—
—
silber/bouncer
Version v1.0.0-rc.10
—
—

Weekly Downloads

Info

Last Published
4 years ago
Created
6 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform