fleetbase/fleetops-api
Fleet & Transport Management Extension for Fleetbase
82%
Total Score
healthy
Healthy: frequent releases and substantial recent repository activity outweigh workflow and security-policy gaps.
Health Score Breakdown
Composer build tooling is present, but no security-scanning tooling was detected, leaving a modest transparency and assurance gap.
The repository has no published security policy, reducing clarity about vulnerability reporting and response.
The audit completed all five workflows with no untrusted checkouts or script injection, but 16 of 17 action references are unpinned and high-confidence secrets-inherit findings expose credentials to reusable workflows. Low-confidence cache findings do not materially add risk.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-59617 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. fleetbase/fleetops-api is vulnerable to Improper Authorization in versions 0.6.52 - 0.6.59. | 0.6.52 - 0.6.59 | Medium |
AIKIDO-2026-21022 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. fleetbase/fleetops-api is vulnerable to Authentication Bypass in versions 0.2.7 - 0.6.59. | 0.2.7 - 0.6.59 | Critical |
Package versions
Maintainers
 Fleetbase Pte Ltd. |
| Ronald A. Richardson |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 brick/geo Version 0.7.2 | — | — |
milon/barcode Version ^10.0 | — | — |
league/geotools Version ^1.1.0 | — | — |
webit/eval-math Version ^1.0 | — | — |
rlanvin/php-rrule Version ^2.6 | — | — |
Weekly Downloads
Info
- Last Published
- 6 days ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.