ezsystems/ezplatform-richtext
eZ Platform RichText Extension, including the RichText FieldType.
18%
Total Score
50
50
75
Health Score Breakdown
Packagist marks the entire package as abandoned, with no replacement package specified. Package-level abandonment is a severe dependency-lifecycle risk.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the archived repository and providing no evidence of ongoing maintenance.
The linked source repository is archived, indicating that active maintenance has ended even though the repository was backed by an organization.
One of six workflows uses pull_request_target, which warrants caution because it can run with elevated repository context. No untrusted checkouts or script-injection patterns were detected.
The package has 87 releases and a history dating back to 2018, but it had no releases in the last 12 months, so its previously active cadence does not compensate for the current abandonment signals.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
CVE-2024-43372 ezsystems/ezplatform-richtext is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 3.3.0 - 3.3.40. | 3.3.0 - 3.3.40 | Low |
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 twig/twig Version ^3.0 | — | — |
symfony/form Version ^5.0 | — | — |
symfony/yaml Version ^5.0 | — | — |
symfony/asset Version ^5.1 | — | — |
symfony/cache Version ^5.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.