codeigniter/framework

The project has a clear MIT license, a substantial repository, and documentation-backed ownership. Its workflow uses three unpinned actions, and no security policy is present.

Latest 3.1.13

Packagist

58%

Total Score

Maintainer Stability

Maturity

Supply Chain

Are you affected? Scan for Free

Health Score Breakdown

Release history

The package has made no releases in the past 12 months, with the latest release in March 2022; this is a substantial maintenance concern for a framework dependency.

Lifecycle scripts

Post-install and post-update scripts run during dependency operations, adding execution surface that warrants caution even though this signal alone does not establish a health failure.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the past three months, indicating currently inactive development.

Repo issue activity

There were no new or closed issues or pull requests in the past month, while 71 issues and 35 pull requests remain open; this reinforces the signs of limited current maintenance.

Security policy

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented for a security-sensitive framework.

Vulnerabilities

Title	Versions	Severity
CVE-2020-24950 codeigniter/framework is vulnerable to Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in versions 0.0.0 - 1.4.9.	0.0.0 - 1.4.9	High
CVE-2014-8684 codeigniter/framework is vulnerable to Security Vulnerability in versions 0.0.0 - 3.0.0.	0.0.0 - 3.0.0	Critical
CVE-2018-12071 codeigniter/framework is vulnerable to Session Fixation in versions 0.0.0 - 3.1.10.	0.0.0 - 3.1.10	Critical