Package Health

elefant/cms

The Elefant CMS

Latest 2.4.1-stablePackagistPackagist

58%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

81

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

100

Are you affected? Scan for Free

Health Score Breakdown

Release historycaution

Only two releases exist, with none in the last 12 months; the latest was about 23 months ago and the median release interval is about 2 years 8 months. This indicates materially slow maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. This reinforces the release-history evidence of currently inactive maintenance.

Repo issue activitycaution

There were no new or closed issues and no merged pull requests in the last month, while 29 issues and 6 pull requests remain open. This suggests limited current project response.

Repo toolingcaution

The project uses Make and Composer, but no repository security-scanning tools were detected. For a CMS with a substantial application codebase, that is a meaningful hygiene gap.

Version stabilitycaution

The assessed version is marked prerelease, and all recent releases are prereleases despite being on a stable major line. That weakens release maturity and predictability.

Vulnerabilities

TitleVersionsSeverity
CVE-2017-20064
elefant/cms is vulnerable to Improper Control of Generation of Code ('Code Injection') in versions 0.0.0 - 1.3.13.
0.0.0 - 1.3.13
High
CVE-2017-20061
elefant/cms is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 1.3.13.
0.0.0 - 1.3.13
Medium
CVE-2017-20060
elefant/cms is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 1.3.13.
0.0.0 - 1.3.13
Medium
CVE-2017-20062
elefant/cms is vulnerable to Cross-Site Request Forgery (CSRF) in versions 0.0.0 - 1.3.13.
0.0.0 - 1.3.13
High
CVE-2017-20057
elefant/cms is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 1.3.13.
0.0.0 - 1.3.13
Medium

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
pda/pheanstalk
Version ^4.0
—
—
google/apiclient
Version ^2.12.1
—
—
chillerlan/php-qrcode
Version ^4.3
—
—
pragmarx/google2fa-qrcode
Version ^3.0
—
—
bshaffer/oauth2-server-php
Version ^1.10
—
—

Weekly Downloads

Info

Last Published
1 year ago
Created
4 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform