CKFinder 3 packaged
42%
Total Score
unhealthy
Risky: no releases or commits since September 2022, with no license file or declaration.
No license is declared and no license file was detected in the package or repository. The README instead says the code is proprietary, so legal permission to depend on it is unclear.
The package has had only two releases, both in September 2022, and none in the past 12 months. This is strong evidence of abandonment risk despite the package not being deprecated.
There were zero commits and zero active maintainers during the past three months, following the last push in September 2022. This materially increases the risk that defects and compatibility problems will go unfixed.
The repository uses Composer, but no security scanning tools were detected. That is a hygiene gap, though the absence of scanning alone is not evidence that the package is unsafe.
The repository has no security policy. For a package handling file uploads and storage integrations, this weakens the project's vulnerability-reporting and response transparency.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
symfony/mime Version ^5.1 | — | — |
pimple/pimple Version >=3.3.0,<3.4.0 | — | — |
monolog/monolog Version ^2 | — | — |
league/flysystem Version >=1.0.67,<1.2.0 | — | — |
symfony/http-kernel Version >=v5.1.5,<5.9.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.