Package Health

feehi/cms

Feehi CMS Project Template

Latest 2.1.1PackagistPackagist

42%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

33

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

78

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

100

Are you affected? Scan for Free

Health Score Breakdown

Release historydanger

The latest registry release was over five years ago, and there were no releases in the last 12 months. Although the project has 40 releases and previously released regularly, this long gap is a strong maintenance concern.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months. Combined with the old latest release, this is strong evidence of abandonment risk.

Project backingcaution

The repository is owned by an individual user rather than an organization, so the project has no shown organizational backing to compensate for its thin maintenance continuity.

Repo issue activitycaution

The repository has 33 open issues but no new or closed issues and no pull-request activity in the last month, indicating that reported work is not currently being handled.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. That is a genuine transparency and maintenance gap, though it is secondary to the project’s inactivity.

Vulnerabilities

TitleVersionsSeverity
CVE-2026-31351
feehi/cms is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 2.1.1 - 2.1.1.
2.1.1 - 2.1.1
Medium
CVE-2026-31353
feehi/cms is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 2.1.1 - 2.1.1.
2.1.1 - 2.1.1
Medium
CVE-2026-31354
feehi/cms is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 2.1.1 - 2.1.1.
2.1.1 - 2.1.1
Medium
CVE-2026-31313
feehi/cms is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 2.1.1 - 2.1.1.
2.1.1 - 2.1.1
Medium
CVE-2026-31352
feehi/cms is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 2.1.1 - 2.1.1.
2.1.1 - 2.1.1
Medium

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
yiisoft/yii2
Version >=2.0.13
—
—
feehi/yii2-cdn
Version *
—
—
yiisoft/yii2-imagine
Version ^2.1
—
—
yiisoft/yii2-bootstrap
Version *
—
—
yiisoft/yii2-swiftmailer
Version *
—
—

Weekly Downloads

Info

Last Published
6 years ago
Created
10 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform