frozennode/administrator

Risky to adopt: the package has been effectively unmaintained, with no releases in the last 12 months and no repository commits in the last 3 months. It has solid documentation, tests, licensing, and an identifiable organization-backed repository, but those strengths do not offset the age and stalled activity.

Latest v5.0.12

Packagist

38%

Total Score

Maintainer Stability

Maturity

Supply Chain

Are you affected? Scan for Free

Health Score Breakdown

Release history

The package has 48 releases, but its latest release was about 10 years ago and it had no releases in the last 12 months. This is strong evidence of abandonment risk for a framework integration package.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last 3 months, indicating that maintenance has stalled despite the repository remaining available.

Lifecycle scripts

The package defines a post-update command, adding some install/update behavior that users should review. It is not by itself a severe concern, but it is an avoidable operational surface in an otherwise stale package.

Repo issue activity

There were no new or closed issues and no merged pull requests in the last month, while 132 issues and 13 pull requests remain open. This suggests little current support or review activity.

Security policy

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, though it is secondary to the severe maintenance concerns.

Vulnerabilities

Title	Versions	Severity
CVE-2020-10963 frozennode/administrator is vulnerable to Unrestricted Upload of File with Dangerous Type in versions 0.0.0 - 5.0.12.	0.0.0 - 5.0.12	High