ezsystems/ezplatform-graphql
Unfit to use: the repository is archived and has had no commits or active maintainers in the last three months. The package has not released since August 2023, making this alpha release a poor dependency choice despite clear licensing, documentation, and organizational backing.
20%
Total Score
50
57
100
Health Score Breakdown
The package has 67 releases and historically released about every 14 days, but its latest release was on August 17, 2023, with no releases in the last 12 months. That prolonged release gap is a substantial abandonment concern.
The repository recorded 0 commits and 0 active maintainers in the last three months, providing no evidence of current maintenance to compensate for the archived status.
The linked repository is archived, which is a severe maintenance and abandonment risk for a package intended as a GraphQL server. Its last push was on November 20, 2024, but the repository's archived status still makes ongoing fixes and support unlikely.
The repository uses Composer build tooling, but no security scanning tools were detected. This is a secondary hygiene gap, outweighed by the stronger abandonment signals.
The assessed version is v4.0.0-alpha2, while the registry reports v2.3.17 as the latest stable major. Using an alpha release adds compatibility risk on top of the package's stale release history.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
CVE-2022-41876 ezsystems/ezplatform-graphql is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in versions 1.0.0-rc1 - 1.0.13 and 2.0.0-beta1 - 2.3.12. | 1.0.0-rc1 - 1.0.132.0.0-beta1 - 2.3.12 | High |
Package versions
Maintainers
 Bertrand Dunogier |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/yaml Version ^5.0 | — | — |
symfony/config Version ^5.0 | — | — |
symfony/console Version ^5.0 | — | — |
erusev/parsedown Version ^1.7 | — | — |
symfony/filesystem Version ^5.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.