Package Health

enhavo/enhavo-app

enhavo

Latest v0.7PackagistPackagist

43%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

71

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Are you affected? Scan for Free

Health Score Breakdown

Release historydanger

The latest release was in May 2019, over seven years ago, and there have been no releases in the last 12 months. This is strong evidence of abandonment risk despite the package not being deprecated.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. Although it was pushed in March 2024, current activity is insufficient to offset the long release gap.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That weakens ongoing supply-chain oversight without proving the package is unsafe.

Security policycaution

The linked repository has no security policy. This reduces transparency around vulnerability reporting and handling, though the organization-backed repository and other project documentation provide some compensation.

Version stabilitycaution

The latest version is v0.7 rather than a stable major release, which suggests limited maturity. It is not marked as a prerelease, so this is a modest concern rather than a severe one.

Vulnerabilities

TitleVersionsSeverity
CVE-2024-25876
enhavo/enhavo-app is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 0.13.1.
0.0.0 - 0.13.1
Medium
CVE-2024-25875
enhavo/enhavo-app is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 0.13.1.
0.0.0 - 0.13.1
Medium
CVE-2024-25874
enhavo/enhavo-app is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 0.13.1.
0.0.0 - 0.13.1
Medium

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
enhavo/enhavo
Version 0.7.x-dev
—
—

Weekly Downloads

Info

Last Published
7 years ago
Created
9 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform