duxweb/dux-php-admin
Documentation, licensing, release notes, and recent registry activity are present. The source project is no longer a dependable maintenance base, so adopting this release creates substantial long-term risk.
15%
Total Score
50
67
50
Health Score Breakdown
Packagist marks the entire package as abandoned, with no replacement specified. This directly signals that new dependencies should not be built on it.
The repository recorded no commits and had no active maintainers in the last three months. That reinforces the abandonment concern rather than offsetting it.
The linked repository is archived even though it was pushed recently, so normal future maintenance and issue handling cannot be relied on.
The repository has no security policy. This reduces transparency around vulnerability reporting, although it is secondary to the package's abandonment signals.
The workflow audit completed cleanly with no dangerous triggers or audit findings, but all six referenced actions are unpinned. That leaves a supply-chain hygiene gap without evidence of an active exploit.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 DuxWeb |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 ramsey/uuid Version ^4.9.2 | — | — |
duxweb/dux-lite Version ^2.4.7 | — | — |
cebe/php-openapi Version ^1.8 | — | — |
intervention/image Version ^3.11 | — | — |
duxweb/dux-lite-cloud Version ^0.0.7 | — | — |
Weekly Downloads
Info
- Last Published
- 6 months ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.