Package Health

clickstorm/cs-seo

The repository includes tests and a changelog, with a clear license and no install-time scripts. Maintenance is active, though security tooling is absent and recent work is concentrated among two contributors.

Latest 10.2.1PackagistPackagist

84%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

93

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Are you affected? Scan for Free

Health Score Breakdown

Repo bus factorcaution

Two contributors were active recently, but one supplied about 78% of commits. Organization ownership provides some handoff capacity, so this is a modest concentration concern rather than a severe risk.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected, leaving a modest gap in automated security hygiene.

Security policycaution

The repository has no security policy, which makes vulnerability-reporting expectations less transparent, although active maintenance and organization backing partly compensate.

Vulnerabilities

TitleVersionsSeverity
CVE-2025-48203
clickstorm/cs-seo is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 9.0.0 - 9.3.0, 8.0.0 - 8.4.0, 7.0.0 - 7.5.0 and 6.3.0 - 6.8.0.
6.3.0 - 6.8.07.0.0 - 7.5.08.0.0 - 8.4.0 +1 more
Medium
CVE-2025-30081
clickstorm/cs-seo is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 9.0.0 - 9.2.0, 8.0.0 - 8.3.0, 7.0.0 - 7.4.0 and 6.0.0 - 6.7.0.
6.0.0 - 6.7.07.0.0 - 7.4.08.0.0 - 8.3.0 +1 more
Medium

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
typo3/cms-seo
Version ^14.3
typo3/cms-core
Version ^14.3

Weekly Downloads

Info

Last Published
1 month ago
Created
10 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform